I'm rotating production secrets all night... great. I confirmed that they've actually used many of my secret keys already.
Which secrets were they using?
So far I found they accessed my S3 buckets, used my OpenAI key (which OpenAI thankfully detected odd behaviour and revoked the key automatically), did readonly operations on my Valkey instance, etc.
The secret ones
Which secrets were they using?
So far I found they accessed my S3 buckets, used my OpenAI key (which OpenAI thankfully detected odd behaviour and revoked the key automatically), did readonly operations on my Valkey instance, etc.
The secret ones