Post

Given today's LiteLLM supply chain attack, what are people's preferred development environment sandboxes on MacOS these days? I think it's time I started running my development environments somewhere where rogue code can't steal all my ~/... credential files

Tom Resing

@tomresing.com

24 Mar

aren't there more secure places to store credentials than on the filesystem? Does this one also get environment variables?

Simon Willison

@simonwillison.net

As far as I can tell it swiped only config files, but plenty of software drops credentials in plain text in dot files these days

24/3/26, 10:37 pm0 reposts2 likes

Tom Resing

@tomresing.com

24 Mar

That's good. I think I've managed to avoid everything that puts credentials in plain text. First lesson in my third full time programming job in 1998, never put any credentials in plain text. Should have been my first lesson in my first internship and everyone else's, too! :)