James Blake’s Post

#blueteam #shell #api 𝙋𝘼𝙎𝙎-𝘿𝙀𝙏𝙀𝘾𝙏𝙄𝙑𝙀 🕵♂ It is a command-line tool that scans shell command history to detect mistakenly written passwords, API keys, and secrets. Using regular expressions, it helps prevent accidental exposure of sensitive information in your command history Link 🔗:- https://lnkd.in/dyNAGuZH

How often are RCE advisories/CVEs being published in Open Source Libraries? Yesterday, I was going through the Github Depandabot Alerts published related to one of the main applications of our client. I was surprised to see critical alerts with the possibility of Remote Code Execution. Furthermore, looking at the last 12 months of Github Advisories Data, RCEs (Command/ Eval/Code/... Injections) are very common. Bottom Line - Regular Upgrade of your Open Source Libraries.

So I found this tool on GitHub called Git-crypt and it's pretty useful. With Git-crypt, you can easily encrypt and decrypt files using a GPG key, and only authorized users can access the decrypted content. This means that if your repository is ever compromised, the encrypted files are useless without the GPG key. One of the great features of Git-crypt is that it seamlessly integrates with Git. When you push files to your repository, Git-crypt automatically encrypts them using the GPG key. And when you pull the data from the repository, Git-crypt decrypts the files automatically so you can use them as usual. https://lnkd.in/dGs3XEVU #securecoding #datasecurity #gitsecurity

In case someone needs to find the exact date of an old LinkedIn post, this is the way: https://lnkd.in/gn6cmFJe "Based on Ryan Benson's work on the TikTok timestamp (https://lnkd.in/gtbWAv6n) I began to have a play around with the 19 digit Linkedin post ID. After some trial and error I found we can convert the post ID to binary, then convert the first 41 binary bits to a decimal to give the UNIX timestamp in milliseconds. Nice!" https://lnkd.in/g5Dh7w5G #linkedin #quicktip

manage and encrypt your secrets, passwords and other items without a .env file using this open source module #pythonprogramming #devopstools