INSUBCONTINENT EXCLUSIVE:
A new bit of research from David Shear at security firm Flashpoint found that there are hundreds if not thousands of open Trello boards
containing passwords, login credentials, and other potentially sensitive stuff including employee on-boarding documents
have put many safeguards in place to make sure that public boards are being created intentionally and have clear language around each
Another rich trove of user data, Github, has been used to find private passwords for years
Anecdotally, a project I was working on suffered a breach when the CTO put a Bitcoin private key into some public Github code
security by not pasting passwords into any site that could make it public
