> How many developers have plain-text tokens lying around on disk? Most of them.... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		viraptor 7 months ago \| parent \| context \| favorite \| on: Shai-Hulud malware attack: Tinycolor and over 40 N... > How many developers have plain-text tokens lying around on disk? Most of them. Mainly on purpose, (.env files) but many also accidentally. (shell history with tokens in the commands)

saleCz 7 months ago [–]

Exactly. There are tools that allow debugging production environments without having to have the credentials on your disk.

I recommend Envie: https://github.com/ilmari-h/envie

It's more convenient than having a bunch of .env.prod, .env.staging files laying around, not to mention more secure.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact