<story><title>View leaked secrets in Git live</title><url>https://shhgit.darkport.co.uk/</url></story><parent_chain></parent_chain><comment><author>thepoet</author><text>We created a static version of this (almost similar to shodan but for keys) using publicly accessible  Github dump hosted on Google Cloud in 2017. We then hosted the processed data, website and our search infra on AWS. AWS security team reached out to us for a potential “collaboration” and asked us to send all AWS keys that we discovered and we sent them the whole list. As a tiny startup, we were elated. Few days later they call us and threaten with a cease and desist notice if we do not take down the website. Remember we are not targeting AWS keys, neither are we in violation of any licensing agreements with respect to the data. We refused to shut it down. They then ask us to stop hosting it on AWS or “anywhere” else since we were using AWS credits to host the product or they will shut our account. When their this strategy did not work out, they contacted someone at Stripe who had given us the AWS credits, who then asked us to take it down or face consequences. We eventually had to shut it down since we did not have a lot of money to fight these people.&lt;p&gt;It was a stressful week for us where we learnt that corporates can lie and bully you to get whatever they want and then can shut you down. Unless you have the means to fight back. Does not matter where you live.</text></comment>
<story><title>View leaked secrets in Git live</title><url>https://shhgit.darkport.co.uk/</url></story><parent_chain></parent_chain><comment><author>dancek</author><text>Blog post about shhgit: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;darkport.co.uk&amp;#x2F;blog&amp;#x2F;ahh-shhgit!&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;darkport.co.uk&amp;#x2F;blog&amp;#x2F;ahh-shhgit!&amp;#x2F;&lt;/a&gt;</text></comment>