Comment Comment by cyberax > exfiltrated a npm token with broad publish rightsI freaking HATE tokens. I hate them.There should be a better way to do authentication than a glorified static password.An example of how to do it correctly: Github as a token provider for AWS: https://aws.amazon.com/blogs/security/use-iam-roles-to-conne... But this is an exception, rather than a rule. parent cyberax 1 year ago
I freaking HATE tokens. I hate them.
There should be a better way to do authentication than a glorified static password.
An example of how to do it correctly: Github as a token provider for AWS: https://aws.amazon.com/blogs/security/use-iam-roles-to-conne... But this is an exception, rather than a rule.