Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library

Comment by brcmthrowaway

4 hours ago

How were the credentials stolen?

3 comments

brcmthrowaway

Reply

free652  4 hours ago

Read from the ENV variables of a container.

  • ahofmann  3 hours ago

    And someone was stupid enough to put a reusable tailscale auth key in there.

    • selfmodruntime  2 hours ago

      I'm willing to bet that 95% of people using tailscale for CI have a 90 day (max days) ephemeral, reusable auth key somewhere in their setup.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities