I remember when a senior developer where i worked was tired of connecting to the servers to check its configuration, so they added a public facing rest endpoint that just dumped the entire active config, including credentials and secrets

That was a smaller slip-up than exposing a database like that (he just forgot that the config contained secrets) but still funny that it happened

[–] PattyMcB@lemmy.world 44 points 1 week ago (2 children)

That's not a "senior developer." That's a developer that has just been around for too long.

Secrets shouldn't be in configurations, and developers shouldn't be mucking around in production, nor with production data.

[–] josefo@leminal.space 2 points 6 days ago

That's just a senile developer

load more comments (1 replies)

load more comments (2 replies)