Hacker News new | ask | show | jobs
by narwally 2761 days ago
> engineers blocked many attempts to increase security, specifically filtering git commits for keys, PII and other expensive mistakes.

I am struggling really hard to find a good reason why anyone would be against this change. Committing keys is a very easy mistake to make, especially for a junior dev. Github is littered with secret keys committed by college students trying to figure out web development for the first time.

I did the same thing when I was fresh out of college and new to both git and using web apis. Luckily it was just a Spotify key and not one for my Dropbox or email.