Another Leak, Another Day

[initroot]

Another day and another idiotic company posting source code that include customer data on github.

https://github.com/Veriagent/justletting

Should we just accept from now on that companies can't keep our data it in their pants?

Personally not affected by this, but appalled. This from a company that won the African Property awards.

Rant over!

 

[Hamster]

Have you informed them?

 

[envo]

Have you informed them?

An issue was put on there, I assume by OP. But I doubt the account is active in any way.

I reported them to Github

 

[envo]

You would need to detail where the sensitive data is, I haven't had time to look through their source like you did:

https://help.github.com/articles/github-sensitive-data-removal-policy/
https://help.github.com/articles/github-sensitive-data-removal-policy/#your-request-must-include

 

[PPLdude]

Seems like it's just these very old files?

https://github.com/Veriagent/justletting/tree/master/justletting/bankfiles

The actual DB looks like it was external and has since been removed or IP has been changed.

 

[ThatGuy_ZA]

The code looks like it is configured for a local dev environment but there is one connection string that has been commented out which includes the IP, username and password for a dedicated server at IS.