HN Explorer

4 comments

[ 3.0 ms ] story [ 16.7 ms ] thread
flukus
A lot of week passwords there, even some defaults. Is there a reason to not have webservers where you have to explicitly enable filetypes?
filosofikode
basically all dots files are ignored via `.gitignore`, specially .env file. I think they use ftp to make their sites live.
bigiain
And quite a few mysql and redis instances that look to be publicly available (or at least which are not 127.0.0.1 - I didn't actually try connecting to any...) Also some almost certainly valid/working email account credentials as outbound mail server configurations...