On: I analyzed Stack Overflow for secrets

[soxocx]

It would be a nice feature if StackOverflow would blank out (####) patterns that potentially match passwords or at least offer this if their system detects a potential password in your post.

[repelsteeltje → soxocx]

Hmm. Fix the easy stuff, the low hanging fruit and you filter for the worse problems and get some false positives for free.

When it comes to leaking secrets, don't trust tools. It's hard, it's human, it just happens.

As for what StackOverflow should do — make it easy to fix leaks, which they do a good job at. Ie. users can edit or delete answers, comments after posting them. Even better if there's a means to create confidential back channels with poster or admin if you spot a potential leak.

[wryanzimmerman → repelsteeltje]

You can’t “fix” a leak, you have to revoke the involved secrets. Editing / deleting the answer is irrelevant.

[matan-h → soxocx]

I agree. I asked for a feature that warn users before they post secrets: https://meta.stackexchange.com/questions/394710/feature-requ...

[viraptor → soxocx]

J, K, APL and other coders would hate this.

[SAI_Peregrinus → viraptor]

Perl would become just as hard to ask questions about.

[sshine → viraptor]

Why? :)

[viraptor → sshine]

Because this is a valid line of J:

    s1a=: 0j2 %~ ^@j. - ^@-@j.

[choudharism → soxocx]

hunter2

[marginalia_nu → choudharism]

I hope you handle this antique meme with care, as it's become quite fragile over the decades.

[dark_ph0enix → choudharism]

What did you write? All I see is ****

[benjijay → dark_ph0enix]

He said *******

[toyg → benjijay]

I put on my robe and wizard hat