security
Secrets in argv, and scanners that fail open
A git clone with Authorization on argv is readable from ps, and a scanner that swallows errors is a silent pass. Two fixes from a PR review.
Read the entry →2 entries tagged “linux”.
A git clone with Authorization on argv is readable from ps, and a scanner that swallows errors is a silent pass. Two fixes from a PR review.
Read the entry →ENOSPC: System limit for number of file watchers reached is an inotify limit, not a full disk. Here's how to find what ate your watchers and raise them.
Read the entry →