Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Junior dev: "I pushed the .env too, you can test it now." Senior dev: "Why?" Junior dev:

338,878 Aufrufe • vor 2 Monaten •via X (Twitter)

47 Kommentare

Profilbild von Eugen Peters
Eugen Petersvor 2 Monaten

If only there were a way to configure the repository so that files with specific extensions wouldn't be pushed. Unfortunately, computers just aren't that advanced yet

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

Yep,let's connect brother

Profilbild von Homer Alby
Homer Albyvor 2 Monaten

lol, it's like: "oh do not commit .env file, instead let's share them back and forth on external apps that we don't full control so we can protect it"

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

Truee😭😭

Profilbild von Cubase Enjoyer
Cubase Enjoyervor 2 Monaten

I fucking hate this shit where junior dev is basically a synonym for retard. As an undergraduate, I need have serious brain injuries to make mistakes like this. Literal common sense

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

😂😂just a joke man,let's connect

Profilbild von d5niel
d5nielvor 2 Monaten

He just means we should think about how to do things different. He never said we should take a dump on security.

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

Yess let's connect brother

Profilbild von The Doctor
The Doctorvor 2 Monaten

Idk how and why git is responsible for not wanting to push env files. And you can push env files as long as you encrypt them using something like dotenvx

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

Let's connect

Profilbild von SYREX
SYREXvor 2 Monaten

I like theo but this is one of the dumbest take. Cuz I really dont care committing them but my agent does. And before i do anything its just start to yell at me

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

😂😂let's connect buddy

Profilbild von Syed-Mohammad Raza
Syed-Mohammad Razavor 2 Monaten

lowkey, elite baller knowledge

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

Let's connect

Profilbild von J0nny🥳
J0nny🥳vor 2 Monaten

Still not sure why this is memed that much - @theo is right u know ? (And its not like there arent any tools to i.e. encrypt certain files in the upload or some such

Profilbild von Tifan
Tifanvor 2 Monaten

Dotenvx solves this, no?

Profilbild von Mr Shivam
Mr Shivamvor 2 Monaten

Lmao but he is right tho

Profilbild von Theo Ephraim 🧙‍♂️
Theo Ephraim 🧙‍♂️vor 2 Monaten

Varlock is the way

Profilbild von Dattaprasad Ekavade
Dattaprasad Ekavadevor 2 Monaten

Wild Theo Spotted

Profilbild von Muhammad Bilal khan
Muhammad Bilal khanvor 2 Monaten

I commit example.env all the time.

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

Good lets connect

Profilbild von Ranjith Kumar
Ranjith Kumarvor 2 Monaten

@theo I'm started seeing everyday on my feed

Profilbild von Brian Decoded
Brian Decodedvor 2 Monaten

You push it so hackers can get honeypotted

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

Yepp honeypot trap,let's connect

Profilbild von Elemental Badger
Elemental Badgervor 2 Monaten

bro is just that guy who used to work at blizzard and streams now with a 2nd puberty lmao

Profilbild von Prem Palhade
Prem Palhadevor 2 Monaten

peak

Profilbild von Harith Bakhrani
Harith Bakhranivor 2 Monaten

@theo do you still stand by this opinion?

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

@theo Let's connect buddy

Profilbild von Sinan🌍
Sinan🌍vor 2 Monaten

🤣🤣🤣

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

Let's connect

Profilbild von DROID
DROIDvor 2 Monaten

Lmao 😂

Profilbild von Das Rotkohlchen
Das Rotkohlchenvor 2 Monaten

I usually commit .env with SOPS + AGE, when I work with a hand full of people. Encrypted nice and easy

Profilbild von Gaurav
Gauravvor 2 Monaten

Lmao 😂

Profilbild von TwoCeBe
TwoCeBevor 2 Monaten

Where is the original video?

Profilbild von Miroslav Kabát
Miroslav Kabátvor 2 Monaten

If whole infrastructure lives in private virtual network or on big iron, who really cares about credentials for 10.0.0.67 or even better, localhost? I’m not a fan of putting .env files in Git, but I can understand why some teams do it - especially in Extreme Programming (XP).

Profilbild von Ray🫧
Ray🫧vor 2 Monaten

Lol 🤣

Profilbild von Insight_xFF
Insight_xFFvor 2 Monaten

Just use bitwarden+bw cli etc then its no problem at all pushing .env. on the contrary its recommend kinda.

Profilbild von Tamal
Tamalvor 2 Monaten

" How do you know that you can't fly if you never jumped of a cliff " ahh Theo 🥀

Profilbild von Sreenandhan
Sreenandhanvor 2 Monaten

🙌let's connect

Profilbild von blank
blankvor 2 Monaten

People get lazy and want a one stop shop for all configurable runtime parameters regardless of whether they're sensitive or not. We already had a tool for preconfigured setups, it's called scripts.

Profilbild von Christopher
Christophervor 2 Monaten

@theo is so right with this. We take so much for granted… because it was always like this.

Profilbild von Maximiliano Moxarella
Maximiliano Moxarellavor 2 Monaten

haha funny dog

Profilbild von El Caganer
El Caganervor 2 Monaten

git-crypt has been around for a decade

Profilbild von Richard H Nguyen
Richard H Nguyenvor 2 Monaten

Is this real? Was he really speaking of this in front of devs and swes from major companies?

Profilbild von Roger Barreto
Roger Barretovor 2 Monaten

Some jnrs only learn in the hard way. 😂😂

Profilbild von Pierre Andrews
Pierre Andrewsvor 2 Monaten

Why can't we push our credit card details?

Profilbild von Godservant Bush
Godservant Bushvor 2 Monaten

@grok what was the original talk about?

Ähnliche Videos

u can say ur dev is doxxed now $wom
3:57

Sensitive content

u can say ur dev is doxxed now $wom

Cruella

82,001 Aufrufe • vor 1 Jahr