RE: https://infosec.exchange/@Javvad/117565608365701740
I hadn't considered this at all, but if you as a developer are being evaluated on your token spend, leaking your access keys isn't just a security breach, it's also an excellent career move.
Nobody is writing code any more. GitHub logged 34.3 billion commits this year, and over 40% of pull requests now start with an AI agent. Two thirds of valid leaked keys were still working four years later.
