FUN FACT:
if you build electronic devices which contain a raspberry pi in them, consider what will happen if one of them gets thrown out.
someone might open them up, stick the microSD card in them into a reader, and open up that tantalizing "apps.json" file which has YOUR GOD DAMN AWS KEYS? IN UNENCRYPTED PLAIN TEXT?
Conversation
Notices
-
Foone🏳️⚧️ (foone@digipres.club)'s status on Thursday, 23-May-2024 10:43:23 JST Foone🏳️⚧️ -
Foone🏳️⚧️ (foone@digipres.club)'s status on Thursday, 23-May-2024 10:44:58 JST Foone🏳️⚧️ it has been zero days since foone has opened up some old tech and accidentally gotten information she was not supposed to have.
-
Foone🏳️⚧️ (foone@digipres.club)'s status on Thursday, 23-May-2024 10:51:39 JST Foone🏳️⚧️ It was literally the first file I opened
-
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 24-May-2024 06:59:54 JST Foone🏳️⚧️ I did a little more searching. This raspi was running balenaOS which is a docker-containers-on-raspi thing.
Fun fact: If you pass environment options to a docker image you're building, they get stored in the config.v2.json file for that container!
So there's ANOTHER COPY OF THE AWS KEYS HERE!
-
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 24-May-2024 07:06:24 JST Foone🏳️⚧️ anyway this is what I have:
https://www.linkedin.com/pulse/ari-introduces-wellness-detector-jonathan-burke/Good news: That company/product doesn't seem to be active anymore. So these keys have almost certainly expired and been invalidated. I'm just gonna assume that and not check because I don't want to get in trouble for "hacking"
-
Phillip K Name (griibor@mas.to)'s status on Friday, 24-May-2024 07:57:23 JST Phillip K Name @foone damn, where do you keep finding this cool e-junk?
-
Foone🏳️⚧️ (foone@digipres.club)'s status on Friday, 24-May-2024 07:57:23 JST Foone🏳️⚧️ @griibor A local e-waste place that my roommate has access to
-