Comment by chasil

When I started my job in 2000, I introduced my fellow (emeretus) DBA to "ps -ef | grep sqlplus" and sprayed a pile of user accounts and passwords. I fixed the problem and learned about Oracle databases.

I checked my apps into RCS archives later that decade with passwords. Expecting to move these archives into CVS, I changed them.

Now, any code repository that I touch, I will run "git grep password" (or the [TFS] equivalent) and once again hit pay dirt.

It seems to take a certain exposure, growth, and wisdom to be mindful of these things, and many are far behind.