RC RANDOM CHAOS

secrets management

4 posts

The next commit captures the file you never named
Article

The next commit captures the file you never named

A .gitignore is a name-based deny-list on a capture-by-default store, so it cannot stop the unnamed secret that lands permanently in git history.

 CISA pushed passwords to a public repo
Article

CISA pushed passwords to a public repo

A top cyberdefense agency published credentials in a public GitHub repository. A control analysis of what failed and what must now be true.

 OAuth ate your secrets
Article

OAuth ate your secrets

The Vercel OAuth breach shows environment variables are not protected by location, only by the identity assertion placed in front of them.

 Cisco's Source Code Breach Was Structural, Not Accidental
Article

Cisco's Source Code Breach Was Structural, Not Accidental

Cisco's source code breach wasn't a fluke. It was the predictable result of credential drift, third-party trust gaps, and dev infrastructure treated as low-risk.