Ask HN: Does anyone need a bot to continuously scan Slack/MS Teams for API keys?

4 points by arpitagarwal ↗ HN

2 comments

[ 4.3 ms ] story [ 12.5 ms ] thread
Can't you actually set up teams to actually block posts containing credentials before they're sent? I had to deal with false positives from this system when I worked at Microsoft. I think it even OCR'd screenshots to find credentials.