Search: trufflesecurity.com | Heykuki News

HK

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

How to clone by commit found via commit referencing to different fork on GitHub?

2 years ago

5 points

2.

Ask HN: Like Gcloud but with Prepayment Only?

2 months ago

1 points

3.

Anyone can access deleted and private repository data on GitHub

trufflesecurity.com

2 years ago

1983 points

4.

Google API keys weren't secrets, but then Gemini changed the rules

trufflesecurity.com

4 months ago

hiisthisthingon

1291 points

5.

I found a backdoor into my bed

trufflesecurity.com

a year ago

980 points

6.

Google’s OAuth login doesn’t protect against purchasing a failed startup domain

trufflesecurity.com

a year ago

503 points

7.

Google OAuth is broken (sort of)

trufflesecurity.com

3 years ago

350 points

8.

I scanned all of GitHub's "oops commits" for leaked secrets

trufflesecurity.com

a year ago

203 points

9.

Driftwood: Know if private keys are sensitive

trufflesecurity.com

5 years ago

78 points

10.

GitLab scan finds 17,000 secrets in public repos, leading to $9000+ in bounties

trufflesecurity.com

7 months ago

30 points

11.

Postman is largest public source of leaked secrets?

trufflesecurity.com

2 years ago

22 points

12.

How to Scan Force Pushed Commits for Secrets

trufflesecurity.com

a year ago

20 points

13.

GCP CloudQuarry: Searching for Secrets in Public GCP Images

trufflesecurity.com

a year ago

18 points

14.

TruffleHog now finds all Deleted and Private Commits on GitHub

trufflesecurity.com

2 years ago

15 points

15.

TruffleHog V3: Automatically Validate over 600 API Keys

trufflesecurity.com

4 years ago

13 points

16.

Live API Keys and Source Code Leaked in 4,500 of the Top Alexa Sites

trufflesecurity.com

3 years ago

13 points

17.

Browse millions of secrets leaked in GitHub/NPM via Forager

trufflesecurity.com

3 years ago

11 points

18.

Research Finds 12,000 'Live' API Keys and Passwords in DeepSeek's Training Data

trufflesecurity.com

a year ago

7 points

19.

Google OAuth is broken (sort of)

trufflesecurity.com

3 years ago

5 points

20.

Claude Tried to Hack 30 Companies.Nobody Asked It To

trufflesecurity.com

3 months ago

5 points

21.

Of-CORS: a framework for hacking internal apps with open CORS

trufflesecurity.com

3 years ago

5 points

22.

An API Worm in the Making: Thousands of Secrets Found in Open S3 Buckets

trufflesecurity.com

6 years ago

5 points

23.

(The) Postman Carries Lots of Secrets

trufflesecurity.com

2 years ago

4 points

24.

Google OAuth is broken (sort of) [Retain access after being offboarded]

trufflesecurity.com

3 years ago

4 points

25.

TruffleHog now finds all Deleted and Private Commits on GitHub (2024)

trufflesecurity.com

3 months ago

3 points

26.

Hugging Face Now Automatically Detects Leaked Secrets

trufflesecurity.com

2 years ago

3 points

27.

Credentials Leaking with Subdomain Takeover

trufflesecurity.com

2 years ago

3 points

28.

Email Graffiti: Take over images in old emails

trufflesecurity.com

4 years ago

3 points

29.

TruffleHog v3: detect and verify 639 key types

trufflesecurity.com

4 years ago

3 points

30.

Claude Tried to Hack 30 Companies. Nobody Asked It To

trufflesecurity.com

4 months ago

2 points