Post

Given today's LiteLLM supply chain attack, what are people's preferred development environment sandboxes on MacOS these days? I think it's time I started running my development environments somewhere where rogue code can't steal all my ~/... credential files

Tom Resing

@tomresing.com

aren't there more secure places to store credentials than on the filesystem? Does this one also get environment variables?

24/3/26, 10:36 pm0 reposts0 likes

Simon Willison

@simonwillison.net

24 Mar

As far as I can tell it swiped only config files, but plenty of software drops credentials in plain text in dot files these days

Tom Resing

@tomresing.com

24 Mar

That's good. I think I've managed to avoid everything that puts credentials in plain text. First lesson in my third full time programming job in 1998, never put any credentials in plain text. Should have been my first lesson in my first internship and everyone else's, too! :)