ghost
That Time I Thought I Got Pwned (But Was Just Being a Noob)
Woke up to suspicious AWS bot traffic hitting my Ghost API endpoints. Spent 5 minutes convinced I was hacked before realizing I'm just an idiot who never read the docs. Turns out Ghost's Content API key is supposed to be public. Who knew? (Everyone except me, apparently.)