Remove this in production(github.com)
github.com
Remove this in production
https://github.com/search?q=%22remove+this+in+production%22&type=Code&utf8=%E2%9C%93
42 comments
A nice, quick security audit.
The vast majority of GitHub projects are not in production. I'm surprised there aren't more hits, although it is an awfully specific search query.
I just got another 4k odd hits with "remove in production" [1]. I think that with enough variation, you can get a lot of hits.
1: https://github.com/search?utf8=%E2%9C%93&q=%22remove+in+prod...
1: https://github.com/search?utf8=%E2%9C%93&q=%22remove+in+prod...
[deleted]
Search with quotes looks for exact match. Searching without quotes [1] yields 3 million results.
[1] - https://github.com/search?utf8=%E2%9C%93&q=remove+before+pro...
[1] - https://github.com/search?utf8=%E2%9C%93&q=remove+before+pro...
My favorite: "In 2038 I will be either too dead or too rich to care about this"
https://github.com/libgit2/libgit2/blob/7adca53ed65380266309...
https://github.com/libgit2/libgit2/blob/7adca53ed65380266309...
Some personal favorites:
proprietary and confidential: https://github.com/search?utf8=%E2%9C%93&q=%22proprietary+an...
do not distribute: https://github.com/search?utf8=%E2%9C%93&q=%22do+not+distrib...
proprietary and confidential: https://github.com/search?utf8=%E2%9C%93&q=%22proprietary+an...
do not distribute: https://github.com/search?utf8=%E2%9C%93&q=%22do+not+distrib...
Is anyone else getting tired of these github search posts? It would be nice if they were all in just one post. Actually the comment threads on this post are all that are needed.
Yup, tried to get a critical mass going here because, well, there are so many phrases that could be posted individually. I think we've proven that interesting phrases exist in code on Github, and now let's let people discover that on their own and free up space for other types of submissions. (https://news.ycombinator.com/item?id=11399790)
A great one for finding potential buffer overflow shenanigans:
"Should be big enough" https://github.com/search?utf8=&q=%22should+be+big+enough%22...
"Should be big enough" https://github.com/search?utf8=&q=%22should+be+big+enough%22...
More intriguing, entertaining, and humorous phrases! I'm sure many of have thought, seen, or typed such things (perhaps not committed though).
Let's max out this concept.
1. "Fire me": https://github.com/search?utf8=%E2%9C%93&q=%22Fire+me%22&typ...
2. "This will break": https://github.com/search?utf8=%E2%9C%93&q=%22This+will+brea...
3. "Never do this": https://github.com/search?utf8=%E2%9C%93&q=%22never+do+this%...
4. "This is evil": https://github.com/search?utf8=%E2%9C%93&q=%22this+is+evil%2...
5. "This is insane": https://github.com/search?utf8=%E2%9C%93&q=%22this+is+insane...
6. "Insanity will follow": https://github.com/search?utf8=%E2%9C%93&q=%22insanity+will+...
7. "Why?": https://github.com/search?utf8=%E2%9C%93&q=%22why%3F%22&type...
8. "For the love of god": https://github.com/search?utf8=%E2%9C%93&q=%22for+the+love+o...
9. "If I could do": https://github.com/search?utf8=%E2%9C%93&q=%22if+i+could+do%... (the hopeful ones)
10. "What the hell am I doing?" : https://github.com/search?utf8=%E2%9C%93&q=%22what+the+hell+... (the confused ones)
11. "Why doesn't this work?": https://github.com/search?utf8=%E2%9C%93&q=%22why+doesn%27t+... (more confusion)
12. "Call me": https://github.com/search?utf8=%E2%9C%93&q=%22call+me%22&typ...
13. "Call me maybe": https://github.com/search?utf8=%E2%9C%93&q=%22call+me+maybe%...
14. "Terrible idea": https://github.com/search?utf8=%E2%9C%93&q=%22terrible+idea%...
15. "This code is awful": https://github.com/search?utf8=%E2%9C%93&q=%22this+code+is+a...
Let's max out this concept.
1. "Fire me": https://github.com/search?utf8=%E2%9C%93&q=%22Fire+me%22&typ...
2. "This will break": https://github.com/search?utf8=%E2%9C%93&q=%22This+will+brea...
3. "Never do this": https://github.com/search?utf8=%E2%9C%93&q=%22never+do+this%...
4. "This is evil": https://github.com/search?utf8=%E2%9C%93&q=%22this+is+evil%2...
5. "This is insane": https://github.com/search?utf8=%E2%9C%93&q=%22this+is+insane...
6. "Insanity will follow": https://github.com/search?utf8=%E2%9C%93&q=%22insanity+will+...
7. "Why?": https://github.com/search?utf8=%E2%9C%93&q=%22why%3F%22&type...
8. "For the love of god": https://github.com/search?utf8=%E2%9C%93&q=%22for+the+love+o...
9. "If I could do": https://github.com/search?utf8=%E2%9C%93&q=%22if+i+could+do%... (the hopeful ones)
10. "What the hell am I doing?" : https://github.com/search?utf8=%E2%9C%93&q=%22what+the+hell+... (the confused ones)
11. "Why doesn't this work?": https://github.com/search?utf8=%E2%9C%93&q=%22why+doesn%27t+... (more confusion)
12. "Call me": https://github.com/search?utf8=%E2%9C%93&q=%22call+me%22&typ...
13. "Call me maybe": https://github.com/search?utf8=%E2%9C%93&q=%22call+me+maybe%...
14. "Terrible idea": https://github.com/search?utf8=%E2%9C%93&q=%22terrible+idea%...
15. "This code is awful": https://github.com/search?utf8=%E2%9C%93&q=%22this+code+is+a...
Two of my favorites from Google code I used to work on (one that I wrote myself, and one that I ended up reviewing) were:
"I am going to hell for this."
"If this is not removed by xx-xx-2008, beat me over the head with a shovel." (Seen and removed in 2010.)
"I am going to hell for this."
"If this is not removed by xx-xx-2008, beat me over the head with a shovel." (Seen and removed in 2010.)
Heh, those are two rarer phrases:
1. "I am going to hell for this": https://github.com/search?utf8=%E2%9C%93&q=%22i+am+going+to+...
2. "Beat me over the head with a shovel": https://github.com/search?utf8=%E2%9C%93&q=%22beat+me+over+t...
Was an image of a shovel emailed to the committer? :)
1. "I am going to hell for this": https://github.com/search?utf8=%E2%9C%93&q=%22i+am+going+to+...
2. "Beat me over the head with a shovel": https://github.com/search?utf8=%E2%9C%93&q=%22beat+me+over+t...
Was an image of a shovel emailed to the committer? :)
"Why does this work?": https://github.com/search?utf8=%E2%9C%93&q=%22why+does+this+...
My personal favorite that I've used on occasion: "I am a horrible monster and I pray for death".
https://github.com/search?utf8=%E2%9C%93&q=%22i+am+a+horribl...
https://github.com/search?utf8=%E2%9C%93&q=%22i+am+a+horribl...
"abandon all hope": https://github.com/search?utf8=%E2%9C%93&q=%22abandon+all+ho...
I once encountered the following helpful comment in some (dys)functional code, next to a particularly inscrutable car crash of lambdas:
"Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn"
7,463 code results for 'fhtagn'. Probably best not to look.
"Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn"
7,463 code results for 'fhtagn'. Probably best not to look.
Scraped all from the page. http://gitoops.xyz/
You should have milked it for all it's worth and submitted separate posts for all these links!
"Let's not do that": https://github.com/search?utf8=%E2%9C%93&q=%22Let%27s+not+do... :)
Though it's definitely fun when things like this emerge and people share stories.
Though it's definitely fun when things like this emerge and people share stories.
[deleted]
We've got another one: "No idea" https://news.ycombinator.com/item?id=11399852
"ugly but works" has many thousands of results!
https://github.com/search?utf8=&q=%22ugly+but+works%22&type=...
https://github.com/search?utf8=&q=%22ugly+but+works%22&type=...
A lot of them were ".example" which is OK.
And others said "WILL remove this in production" - i.e. basically a TODO in code which is quite normal for code in development.
Pitchforks down.
And others said "WILL remove this in production" - i.e. basically a TODO in code which is quite normal for code in development.
Pitchforks down.
They're mostly demos, as expected. Is anyone surprised?
Nope. Such comments are interesting to see the shared experiences and thoughts while writing code, and others are for snickering at the irony, especially when it's not a demo.
Is anyone going to do a search for usernames and passwords?
careless developers
This is interesting :)
haha funny :D
While vastly entertaining ( personal fav is "Call Me Maybe" ) does this create a moral obligation to audit some of these repos that might be in prod and alert the owners of possible security flaws?
We could check used lyrics for sure...then who owns the code?
Oops I did it again: https://github.com/search?utf8=%E2%9C%93&q=%22oops+i+did+it+...
Oops I did it again: https://github.com/search?utf8=%E2%9C%93&q=%22oops+i+did+it+...
How will you know what's in prod? How do you know what's a security flaw and what isn't?
filename:id_rsa: https://github.com/search?utf8=%E2%9C%93&q=filename%3Aid_rsa
filename:secring.gpg: https://github.com/search?utf8=&q=filename%3Asecring.gpg
extension:.pem BEGIN https://github.com/search?utf8=&q=extension%3A.pem+BEGIN