TLDR InfoSec · STRATEGIES & TACTICS

STOP PUTTING YOUR PASSWORDS INTO RANDOM WEBSITES (YES, SERIOUSLY, YOU ARE THE PROBLEM)

labs.watchtowr.com14 min read

Summary from the TLDR InfoSec newsletter

Organizations and individuals have been carelessly exposing sensitive passwords, credentials, keys, and private data by pasting them into public online code formatting tools like JSONFormatter and CodeBeautify. These tools often let users save and share formatted data through predictable URLs, leaving credentials easily discoverable and accessible to anyone, including attackers. Thousands of secrets belonging to major sectors such as government, banking, healthcare, and critical infrastructure have been discovered. Never trust random online tools with any sensitive information, as this habit creates far-reaching security risks and exposure.