Royce Williams on Nostr: Good morning to everyone except GitHub, which:<li><p>allows (but strongly ...
Good morning to everyone except GitHub, which:<li><p>allows (but strongly discourages) fine-grained access tokens with no expiration date, but</p></li><li><p>won't let you create one with an expiration date more than one year out.</p></li>
So my choices are "never expire" or expire in a year or less".
Our Threat Models May Vary!
Published at
2025-08-24 16:00:15 UTCEvent JSON
{
"id": "f663229a670286f44c891f91dcc65ed54e7e28904f744d39e7d7caedb2e74a4b",
"pubkey": "69647d5b8817472ac2ced4b88fd94dceb69e7cb0603872771a6737470a865e1d",
"created_at": 1756051215,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@tychotithonus/115084572464697352",
"web"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/084/577/063/180/916/original/104e991dda12e654.png",
"m image/png"
],
[
"proxy",
"https://infosec.exchange/users/tychotithonus/statuses/115084572464697352",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/tychotithonus/statuses/115084572464697352",
"pink.momostr"
],
[
"-"
]
],
"content": "Good morning to everyone except GitHub, which:\u003cli\u003e\u003cp\u003eallows (but strongly discourages) fine-grained access tokens with no expiration date, but\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003ewon't let you create one with an expiration date more than one year out.\u003c/p\u003e\u003c/li\u003e\n\nSo my choices are \"never expire\" or expire in a year or less\".\n\nOur Threat Models May Vary!\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/115/084/577/063/180/916/original/104e991dda12e654.png\n",
"sig": "6b6c1ae3f532dccbbeb51568d59fe6af31811b27ca1180380487bb17ec9959083649cec2b24ac551c45375efffae3b62f3d33c98063a7325baa516e7e1271b2c"
}