Skip to content

Security-related question about a possible exposed credential #92

@Emma-NYL

Description

@Emma-NYL

Hello,

My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.

While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.

Could you please help clarify whether the detected string is:

  1. a real credential, or
  2. a placeholder / example value?

Thank you for your time.


Code snippet (sensitive values masked):

#Geokit::Geocoders::proxy = 'https://user:****word@host:port'

# This is your yahoo application key for the Yahoo Geocoder.
# See http://developer.yahoo.com/faq/index.html#appid
# and http://developer.yahoo.com/maps/rest/V1/geocode.html
#Geokit::Geocoders::YahooGeocoder.key = 'REPLACE_WIT****UR_YAHOO_KEY'
#Geokit::Geocoders::YahooGeocoder.secret = 'REPLACE_WITH_****_YAHOO_SECRET'

# This is your Google Maps geocoder keys (all optional).
# See http://www.google.com/apis/maps/signup.html
# and http://www.google.com/apis/maps/documentation/#Geocoding_Examples
#Geokit::Geocoders::GoogleGeocoder.client_id = ''
#Geokit::Geocoders::GoogleGeocoder.cryptographic_key = ''

Thank you in advance for your time - I really appreciate it!

Sincerely,
Emma

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions