DEV Community

Discussion on: Stop Using .env Files Now!

Collapse
 
grantv profile image
grantv

Hackers don’t compromise systems, they compromise people.

That buffer overflow bug, code written by a human.
That bad admin password on a publicly accessible resource, entered in or accepted as a default by a human.
That phishing email clicked on, by a human.
Storing your secrets in an env file or a config store or any number of other means, is somehow accessible or was created by a human.

Compromise the human, compromise the system.

Collapse
 
gregorygaines profile image
Gregory Gaines

Ooh, we are getting poetic and philosophical now! I like it!