6 min read
|
Saved February 14, 2026
|
Copied!
Do you care about this?
This article discusses the alarming trend of users inadvertently sharing sensitive data, like passwords and credentials, on online code formatting tools. The authors reveal their investigation into two popular tools, JSONFormatter and CodeBeautify, where they uncovered thousands of exposed secrets due to a lack of user awareness about the shareable nature of saved content.
If you do, here's more
The article highlights a troubling trend in cybersecurity, focusing on the reckless sharing of sensitive information through popular online code formatting tools like JSONFormatter and CodeBeautify. Researchers discovered over 80,000 saved JSON files containing a wealth of exposed credentials, including Active Directory credentials, API keys, database access, and even sensitive personal information. The findings reveal that these tools, often used for quick code beautification, allow users to save and share their formatted data via easily accessible links, which can lead to serious data breaches.
The authors emphasize a pattern of negligence in the tech community, where developers often overlook the risks associated with using these online tools. By scraping the "Recent Links" pages of both platforms, they extracted valid IDs and accessed the contents of numerous saved files. This method demonstrated how easily anyone could retrieve sensitive data, highlighting a fundamental misunderstanding among users about the permanence and visibility of their shared information. The article serves as a stark reminder that if basic security practices arenβt followed, even the most intelligent organizations can fall victim to their own careless habits.
Questions about this article
No questions yet.