Comment by int32_64
11 hours ago
It could be an interesting cybersecurity technique to hide obvious crypto private keys all over.
If it gets swept you are breached.
11 hours ago
It could be an interesting cybersecurity technique to hide obvious crypto private keys all over.
If it gets swept you are breached.
There are entire businesses set up to help enterprises do this at scale: https://canarytokens.org/nest/
I have no idea how I have lived this long, having the career I have without knowing this existed.
Recent discussion (161 points, 3 days ago, 23 comments) https://news.ycombinator.com/item?id=50185630
Yeah, just keep dust in it. Like $10
Only works for low value targets, where you don't have to trust your coworkers. Probably need to rotate the key daily, which possibly adds transaction costs. You would also need to set up the detection capabilities to be able to figure out the intrusion path, or the flag is pretty meaningless. And at that point you may just as well put tripwires onto sensitive files.