You know, maybe *dont* put your firebase credentials in your webpack for your OSINT avatar company.

[drwhax@infosec.exchange]

You know, maybe *dont* put your firebase credentials in your webpack for your OSINT avatar company.

[inthehands@hachyderm.io]

@drwhax @rysiek
Firebase is such a beautiful case study in how convenience is in direct conflict with security, and “it should just work” lays the groundwork for fundamental architectural security flaws. Somebody should write that up (maybe already has?).