Hacker News new | ask | show | jobs
by all_usernames 3671 days ago
A warning: do NOT do what one engineers I used to work with did, and upload his "dot files" onto GitHub for portability. A lot of secrets can be stored in a few months' worth of bash history.
2 comments

there's nothing wrong with uploading your dotfiles -- lots of people do that -- just as long as you do it sanely and don't upload things like .ssh/id_* and .{bash|zsh}_history
Make sure you upload your AWS_SECRET_ACCESS_KEY and AWS_ACCESS_KEY_ID.