---
id: 8138
title: "Please Stop Giving Me Your Passwords"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/vulnerability-management/please-stop-giving-me-your-passwords/"
published_at: "2018-03-27T00:00:00Z"
tags: ["secure-coding", "secrets-management", "sast", "xxe", "database-security", "hardcoded-credentials"]
phying_url: "https://phying.com/item/8138"
lang: en
---

# Please Stop Giving Me Your Passwords

## Summary

A code review found 30 hardcoded database passwords across 20 accounts; the article shows how flaws like XXE turn leaked source into direct DB access and outlines safer secret distribution options.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2018-03-27T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/vulnerability-management/please-stop-giving-me-your-passwords/
- **Phying News:** https://phying.com/item/8138