Canary token: the trap that speaks on your behalf

A file with an appetising name, a false credential, a DNS that does not answer: none of this protects an asset, and yet it tells you who got in. The story and use of canary tokens, from cartographers to AWS containers.