Developer posts secret key on GitHub, loses $40K in 2 minutes

AnActOfCreation@programming.dev to Technology@lemmy.world – 528 points –
Developer posts secret key on GitHub, loses $40K in 2 minutes
cointelegraph.com
  • Web3 developer Brian Guan lost $40,000 after accidentally posting his wallet's secret keys publicly on GitHub, with the funds being drained in just two minutes.
  • The crypto community's reactions were mixed, with some offering support and others mocking Guan's previous comments about developers using AI tools like ChatGPT for coding.
  • This incident highlights ongoing debates about security practices and the role of AI in software development within the crypto community.
78

You are viewing a single comment

I basically always do a git add -p

Very useful command and it works with other git commands as well.

Everytime a colleague asks me for help with git that’s the one rule I suggest them to use.

What does that do?

Instead of just adding whole changed files, it starts an interactive mode where it shows every hunk of diffs one by one, and asks you to input yes or no for each change. Very helpful for doing your own mini code review or sanity check before you even commit.

I use vscode with plugins and manually add my files now. The workflow is beautiful.

If you ever Stage Selected Range in VSCode, that accomplishes basically the same thing as git add -p!

That’s exactly why I do it

The s option is very useful to split the chunks.