Skip to content
Better HN
Top
Best
Ask
Show
New
Jobs
Search
⌘K
“johnyj12345” exposing self-hosted Gitlab's secrets to the public
(opens in new tab)
(blog.philipp-trommler.me)
5 points
ferruck
5y ago
1 comments
Save
Share
1 comments
1 comments · 1 top-level
top
newest
oldest
ferruck
OP
5y ago
It seems like a user named "johnyj12345" is making it's rounds on self-hosted Gitlab instances since Saturday, exposing server secrets to the public by creating issues containing Gitlab's `secrets.yml` file. Better check your instance!
j
/
k
navigate · click thread line to collapse