Password.link VS Gitrob

• Easy to Use
  Password.link offers a user-friendly interface that makes it easy to share passwords securely without requiring an account.
• Security
  The service encrypts passwords before sharing, ensuring that only the intended recipient can decrypt and view the password.
• Self-destruct Feature
  Links generated for sharing passwords automatically self-destruct after a single use, minimizing the risk of passwords being accessed by unauthorized users.
• No Account Required
  Users can utilize Password.link to share passwords without needing to create an account, which enhances privacy.

Possible disadvantages

• Limited Use Cases
  While effective for one-time password sharing, the service may not be suitable for more frequent sharing needs or for managing long-term access.
• Dependence on Internet
  The service requires an active internet connection to generate and access the password links, which can be inconvenient if connectivity is an issue.
• Potential Trust Concerns
  As with any web-based service, some users may have concerns over trusting a third party with sensitive information, even if it's encrypted.
• No Integration
  Password.link might lack integration with other password managers or apps, limiting its functionality within an ecosystem of security tools.

• Open Source
  Gitrob is an open-source tool, which means it's free to use and its source code can be reviewed and modified by anyone, providing transparency and flexibility for users.
• Sensitive Data Detection
  Gitrob is designed to help detect potentially sensitive information in repositories, such as API keys, credentials, and other secrets, thus enhancing security.
• Automation
  The tool automates the scanning of repositories, making it easier and faster to identify potential security risks without the need for manual code reviews.
• Integration with GitHub
  Gitrob integrates directly with GitHub, allowing seamless scanning of GitHub repositories for sensitive information.

Possible disadvantages

• Limited to GitHub
  Gitrob primarily focuses on GitHub repositories, which may limit its usefulness if you need to scan repositories hosted on other platforms such as GitLab or Bitbucket.
• Requires Setup and Configuration
  Users must set up and configure Gitrob to use it effectively, which may require time and understanding of its requirements and environment.
• Potential for False Positives
  Like many automated tools, Gitrob can sometimes produce false positives, leading to time spent on investigating results that are not actual threats.
• Maintenance and Updates
  As an open-source project, Gitrob's updates and maintenance depend on community contributions, which might not be as frequent or comprehensive as commercial alternatives.

• How do you send secrets to other people

  Keeper Security is an alternative that works with company SSO. Otherwise use a one time service like https://password.link/. Source: over 4 years ago

• Show HN: No Secrets Quickly find sensitive files in your GitHub repo

  There are a ton of them, here are a few: https://martinfowler.com/articles/session-secret.html https://github.com/trufflesecurity/trufflehog https://github.com/awslabs/git-secrets https://github.com/sirwart/ripsecrets... - Source: Hacker News / over 4 years ago