Elektrine lite

← Feed

@percent@infosec.pub

Post #3861797

2026-07-16 15:30 UTC

Of course it’s better than hard coded, but still pretty bad to store production creds in plaintext — if at all. In the uncommon event that I need production creds, it’s a manual human chore by design. Normal development/experimentation should almost never connect to prod environments. That was generally a bad practice long before AI agents existed.

Replies (1)

  • @theneverfox@pawb.social 2026-07-16 17:58

    How do you bounce the system? How do you auto restart the service if it fails? At the end of the day, a lot of creds have to essentially be stored in plain text somewhere And to be clear, to me production creds mean creds that live on the production system, not creds that give access to the production system The crazier thing here is why was an AI working on or pushing to prod

    Open ##3864744