SHGA Shanghai Gov National Police Database Stolen

• gitleaks

  35 15,225 8.2 Go

  Protect and discover secrets using Gitleaks 🔑

  

More and more providers have been adding unique prefixes to their tokens and access keys which makes detection much easier. Ex, GitLab adds `glpat-` to their PAT.

A project I maintain, Gitleaks, can easily detect "unique" secrets and does a pretty good job at detecting "generic" secrets too. In this case, the generic gitleaks rule would have caught the secrets [1]. You can see the full rule definition here [2] and how the rule is constructed here [3].

[1] https://regex101.com/r/CLg9TK/1

[2] https://github.com/zricethezav/gitleaks/blob/master/config/g...

[3] https://github.com/zricethezav/gitleaks/blob/master/cmd/gene...

• aws-vault

  49 8,141 1.7 Go

  A vault for securely storing and accessing AWS credentials in development environments

  

For my dev machine's interactions with AWS, I use https://github.com/99designs/aws-vault

You add the long lived secret to it and it stores it in a password protected storage (MacOS keychain or similar).

Then you invoke aws-vault with an IAM role and command, and it will handle obtaining short-lived credentials scoped to that role (including TOTP 2-factor code auth), and then run the command with those temporary credentials as env vars.

With the right AWS permissions on your user, it can also automatically rotate the IAM user API keys for you.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• aws-okta

  3 520 3.3 Go

  Discontinued aws-vault like tool for Okta authentication

  

Depending on your IdP there's a few tools in addition to AWS CLI v2 that works well in this space.

aws-vault is one of them, though out of support now, aws-okta [1] is another.

[1] https://github.com/segmentio/aws-okta

• nitter

  950 9,639 6.0 Nim

  Alternative Twitter front-end

A different instance may work for you https://github.com/zedeus/nitter/wiki/Instances

• hn-search

  1,618 524 2.9 TypeScript

  Hacker News Search

  

I knew there'd be someone from the Netherlands to elaborate!

I actually saw the fact pointed out in a comment—it's brought up surprisingly often here. Even a fairly narrow query finds many comments https://hn.algolia.com/?query=netherlands%20religion%20nazi&...

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project