[Security] Example Credentials in Draft Content

[mrlesmithjr]

Summary

Password hashes from Quagga router configuration are present in draft content and could be confused with real credentials.

Location

_drafts/hey-i-can-devops-my-network-too-auto-configured-ospf-from-manual-configured-ospf-part-6-.html

Description

Draft blog post content includes password hashes from Quagga router lab configuration. While these are lab credentials, they could be:

• Mistaken for real credentials
• Used to attempt password cracking
• Leaked if drafts are accidentally published

Impact

Very Low - These are lab/example credentials, but could cause confusion or be used in social engineering attacks if someone believes they are real.

Remediation

1. Replace password hashes with placeholder values:

   password: <REDACTED_LAB_PASSWORD>
   

2. Add a prominent note indicating these are lab credentials:

   <!-- NOTE: All credentials shown are from a lab environment and are not real -->

3. Consider using consistent placeholder format across all draft content

Priority

P3 (Low) - Informational, lab credentials only

References

• CWE-798: Use of Hard-coded Credentials (informational context)