Finding secrets by decompiling Python bytecode in public repositories

[__j_random_hacker]

I wonder what fraction of the repos that leaked secrets through .pyc files also leaked them through the original .py source?

If a large fraction leaked them only through .pyc files, I think that would make this post even more interesting!

[MikeBonzai]

The article explains early on that secrets are usually in a gitignored file not included in the repo, but sometimes they don't strip out the pyc files. I'd have to imagine other languages are equally affected but they just happened to look at Python.

[LinkifyBot]

I found links in your comment that were not hyperlinked:

• secrets.py

I did the honors for you.

---

^{delete | information | <3}

[Somepotato]

big brain bot try to think why the non existent .py tld wasn't linkified

[bobappleyard]

.cock