I scanned all of GitHub's "oops commits" for leaked secrets(trufflesecurity.com)

164 points by elza_1111 1 year ago | 87 comments

GitLab scan finds 17,000 secrets in public repos, leading to $9000+ in bounties(trufflesecurity.com)

12 points by adrianwaj 11 months ago | 4 comments

How to Scan Force Pushed Commits for Secrets(trufflesecurity.com)

11 points by mmcclure 1 year ago | 1 comments

I found a backdoor into my bed(trufflesecurity.com)

855 points by riverdroid 1 year ago | 345 comments

Truffle Security blog post describing a backdoor found in the Eight Sleep smart bed that allowed remote access, and how the authors removed it.

Google API keys weren't secrets, but then Gemini changed the rules(trufflesecurity.com)

1206 points by hiisthisthingon 8 months ago | 288 comments

Truffle Security blog post explaining that public Google API keys, long deemed non-secret, can now access Gemini and private data, based on scans of exposed keys.

Anyone can access deleted and private repository data on GitHub(trufflesecurity.com)

1823 points by __0x1__ 2 years ago | 341 comments

Truffle Security blog post explaining how data from deleted forks, deleted repositories, and private repositories on GitHub can remain accessible to anyone.