Hacker News Reader

Your amazon credentials might be in the source code.

https://github.com/aaronlifton/Gooo/blob/master/model/model....

Submitted an issue for this. Good catch.

I've sent him an email.

>_< thanks for the email. Thankfully just a free heroku postgres account with auto-generated credentials so I deleted it.

https://github.com/aaronlifton/Gooo/commit/8d5f50fe9e45eb2b3...

Still available ;)

Follow this guide to totally erase it and optionally get rid of those commits where you took it out:

https://help.github.com/articles/remove-sensitive-data

thanks. it's useless data now, every param has changed and the previous are void, but i'll take your advice anyway :)

I know it's useless data now, but I'm sure this won't be the last time you put sensitive data in a git repo... I know it happens to me often :D

This is why I always make config files for my projects that contain usernames and passwords, add that config to the .gitignore and then create a sample_config with the blank version. I learned to do this after one or two commits containing sensitive data. =)

That's something useful that will also keep us from being lazy and hardcoding things when we usually need a config anyway :D

Reply on news.ycombinator.com