Abdulkadir highlights a common Git mistake where adding .env to .gitignore after it’s already tracked doesn’t prevent committing secrets, leading to password leakage into repos and history.
He saw a .env file with database passwords.
He typed echo ".env" >> .gitignore.
The .env file was already tracked.
I asked if he enjoyed leaking credentials or just hated the
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security