“johnyj12345” exposing self-hosted Gitlab's secrets to the public (blog.philipp-trommler.me) 5 points by ferruck 6y ago ↗ HN
[–] ferruck 6y ago ↗ It seems like a user named "johnyj12345" is making it's rounds on self-hosted Gitlab instances since Saturday, exposing server secrets to the public by creating issues containing Gitlab's `secrets.yml` file. Better check your instance!
1 comment
[ 2.7 ms ] story [ 11.9 ms ] thread