865
you are viewing a single comment's thread
view the rest of the comments
[-] ignotum@lemmy.world 85 points 2 days ago

I remember when a senior developer where i worked was tired of connecting to the servers to check its configuration, so they added a public facing rest endpoint that just dumped the entire active config, including credentials and secrets

That was a smaller slip-up than exposing a database like that (he just forgot that the config contained secrets) but still funny that it happened

[-] PattyMcB@lemmy.world 45 points 2 days ago

That's not a "senior developer." That's a developer that has just been around for too long.

Secrets shouldn't be in configurations, and developers shouldn't be mucking around in production, nor with production data.

[-] josefo@leminal.space 2 points 20 hours ago

That's just a senile developer

[-] ignotum@lemmy.world 2 points 1 day ago

Yeah the whole config thing in that project was an eldritch horror of a legacy, too ingrained in both the services and tooling to be modified without massive rewrites

[-] palordrolap@fedia.io 16 points 2 days ago

I would have put IP address access restrictions on that at the very least. I may have even done something like that more than once for various tools in the past.

That way it acts completely open to people (or other servers) in the right places and denies all knowledge to anything else.

this post was submitted on 26 Jul 2025
865 points (99.0% liked)

Programmer Humor

25282 readers
864 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS