Credentials in the project file?

OpenPonk / openponk

The OpenPonk modeling platform

https://openponk.github.io/

MIT License

43 stars 9 forks source link

Credentials in the project file? #36

Closed Securitybits-io closed 4 years ago

Securitybits-io commented 4 years ago

https://github.com/OpenPonk/openponk/blob/master/repository/OpenPonk-Telemetry/OPTelemetry.class.st

Looking at this file there are some credentials at the bottom, anything valid?

peteruhnak commented 4 years ago

Thanks for the report! This is sentry.io DSN (crash report endpoint), and isn't really a secret. The worst thing one can do with DSN is spam crash reports (which can't be helped), or data mine GitHub. :)

@JanBliznicenko this isn't used anymore, and iirc to use the latest sentry version (if you would want to setup everything again), you would need to make some changes in the pharo-sentry codebase and generate a new DSN.