There are bots that scan GitHub for credentials and private keys.
Sorry that happened to you, I hope it wasn't a lot of money.
Considered adding files like that to .gitignore in the future.
Sorry that happened to you, I hope it wasn't a lot of money.
Considered adding files like that to .gitignore in the future.
So far, nothing has been taken from GitHub.
(It's part of research for my side project serverthiefbait.com)
Seems like you could achieve the same result if you just let your customers buy their own coins and provide an address for you to watch?
I have had troubles with people using the service as a way to get money off stolen credit cards, so the low initial deposit is a way to avoid that.
There is also a lot of per-customer randomness to prevent bad guys writing logic to detect which wallets are provided by my services. That's why they don't all have a fixed balance.
> Seems like you could achieve the same result if you just let your customers buy their own coins and provide an address for you to watch?
Yes - there are other services that do that for free already. This is more of an all-in-one setup for those who want to set-and-forget.
Look up documentation and examples on .env files.
If you deploy to a service such as Vercel or AWS you can set environment variables there for production.