Urgent.News

the world's headlines, one feed

More in Tech

The Insecure Default Was the Configuration

I was moving a pile of automation scripts into version control — years of accumulated cron jobs that had only ever existed on one machine — and ran a secret scan before the first commit.

  • Hardcoded API key discovered in automation scripts
  • Default value served as primary configuration
  • Security scanner ineffective at detecting passwords