this post was submitted on 03 Apr 2026
14 points (81.8% liked)

Security

2039 readers
4 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 2 years ago
MODERATORS
Vacant@programming.dev
14
Don’t let A.I. read your .env files (filiphric.com)
submitted 1 week ago by codeinabox@programming.dev to c/security@programming.dev
4 comments fedilink hide all child comments
 

AI coding assistants like Claude Code, Cursor, and GitHub Copilot are becoming part of our daily workflow. They read our files, understand our codebase, and help us write code faster. But there's a problem - they can also read your .env files.

you are viewing a single comment's thread
view the rest of the comments
[–] AntiBullyRanger@ani.social 2 points 1 week ago

Instead, upload .env poisons.