secrets
2 posts — newest first.
-
LiteLLM 1.107.0: The Key Was Deleted in May. Nobody Revoked It.
The malicious release was live for two hours. Getting there took five months, an agent platform holding an owner's token, and a relaxed release gate.
-
Secrets Management: Scope, Lifetime, and the Blast Radius of a Leak
Storing secrets safely is the easy half. The damage is decided by what one credential can do, for how long, and whether you can revoke it safely.