LHardi

Hi there, a feature to scan previous commits sounds awesome and I'll start working on it soon!

truffleHog also provides a sophisticated approach in detecting potential secret strings.

Thank you for the feedback! :)

LHardi

9 lat temudiscuss

Thank you for the suggestion! I will add that feature today. I believe that the project will be more useful if it can be easily integrated into CI pipelines!

LHardi

9 lat temudiscuss

Hi there, I built this library after reading up some InfoSec SE posts about what sensitive files (and information) that should be gitignored or not included at all in a git repo.

The following article was also a motivation for me to start the project, “Dev put AWS keys on Github. Then BAD THINGS happened”: https://www.theregister.co.uk/2015/01/06/dev_blunder_shows_g...

How this library works: sniffgit starts from the root of your git working directory, and check if there are any sensitive files (id_rsa, *.cert, etc) that are exposed, i.e. files that haven't been gitignored or files that shouldn’t be in a repo at all.

This library also checks textfiles for sensitive information, such as AWS_SECRET_ACCESS_KEY, email, password, etc. Some files and directories are not going to be read at all, though (e.g. binary file, .git, yarn.lock).

Currently, the “sensitive info / line analysis” will have a lot of false positive result for larger projects. The reason is that it only checks for keyword such as “password, API_KEY, email, etc” for each line in a text file.

This is my first ever open-source project. Feedbacks are truly appreciated, particularly about OSS best practices :).

LHardi

9 lat temudiscuss

  Location: Davis, CA
  Remote: Yes
  Willing to relocate: Yes
  Technologies: Ruby on Rails, React, Python (Pandas, TensorFlow), Flask, C, Java, Git, Docker, Capybara, Selenium, MATLAB
  Résumé/CV: https://lili113.typeform.com/to/PTnaKv
  Email: https://lili113.typeform.com/to/PTnaKv

I'm a 4th year Computer Science student at UC Davis and I'm graduating in December 2017. I'm looking for an entry-level software engineering position (starting in January/February 2018).

LHardi

9 lat temudiscuss

That's what I noticed too. I'm trying to figure out a way to fix the layout on mobile devices. Thanks egfx :)

LHardi

9 lat temudiscuss

I'm glad that you like the content :) Thank you! I will add more content soon since I've gotten more resources from the comments too.

LHardi

9 lat temudiscuss

Thank you! And thanks for the link to indiehackers. I could find some company informations there that I could not find before (e.g. Sidekiq and Shogun). I will definitely add more content very soon.

Will try to find workaround regarding the javascript too.

LHardi

9 lat temudiscuss

True, some of the explanations are too short. I will add more details into some of the company pages. Thank you for your suggestion!

LHardi

9 lat temudiscuss

Thanks! I will try to trim down the unnecessary categorization. I have also added a share button as you have mentioned (only on Twitter to start with) :). I will definitely add more share buttons.

LHardi

9 lat temudiscuss

Hi, I built this site to show how companies (mostly in tech) got their first users / how they got viral. Hopefully, people will get some new inspirations on how to get new users based on what have been done in the past :).

LHardi

10 lat temudiscuss

Hi, I built this to help myself prepare for my next summer internship interviews. Some detail about this app:

- Interviewroom generates random questions, because I find that the surprise element is more helpful than preparing for a long list.

- You can login, save questions into your profile, and then compile them into a PDF file (“Save to Dropbox” feature coming soon :)).

- Button placement is a bit odd on wider screens, need to figure this out.

All suggestions are welcome :)

Submissions

Show HN: Sniffgit – A Python lib to find sensitive files and information in a repo

Show HN: Theywish.io – What famous people wish they knew when they were younger

Show HN: Firstusers.io – Find out how companies got their first users

Show HN: Interviewroom – A web app to help you prepare for your job interviews

comments