Hacker News new | ask | show | jobs
by bigDinosaur 233 days ago
It's not our responsibility to avoid jokes because some people are awful at their jobs and/or idiots. How on earth would people who would send an API key in response to a joke fare against a genuinely malicious social engineering attempt...?
3 comments
kstrauser 233 days ago
I think it's our responsibility to make it a laughing matter in technical settings, such that it's universally understood that sharing your keys is a terrible idea and you should never do it because people will laugh at you for doing it, even if you're not 100% sure why.

Around non-technical people, explain why it's a bad idea, and be empathetic so that your friends, family, and coworkers feel comfortable asking you questions about things like that. Among your techie friends, absolutely, laugh away.

link
dijit 233 days ago
Agreed, both the joke and the warning are valid.

Someone will learn from this, so it's totally worthwhile and I hope nobody got offended.

If they did, we have bigger issues potentially.

link
nashashmi 233 days ago
It is not my job so stuff like this is helpful to know.
link
defraudbah 233 days ago
no worries my friend, it's all good, we have a team of professionals to run security checks on your AWS keys.

Since many businesses were affected by an awful, irresponsible AWS incident, we understand it might be challenging times for software business, which is why our team runs free security checks for all tokens we receive, limited offer, only today, send us your credentials and get your report in less than 24 hours.

we already received more than 100 API keys from people with a referral from hackernews, there are only 50 seats left

link