News for hackers. Stuff that matters.
Re:Helicone.ai (YC W23) – Open-Source Logging for OpenAI by kiwicopple on Thursday March 23, 2023 @11:41PM (#35284827)
These appear to be local credentials (supabase init, supabase start), but I'll reach out to the founders now to make sure everything is secure on their Production database/APIs.

---

For any other founders reading this, it's recommended to add a `SECURITY.md` to your repo before doing a ShowHN/LaunchHN. This can be exposed in your `.well-known` folder (eg: https://supabase.com/.well-known/security.txt). This will help with responsible disclosures.

Re:Helicone.ai (YC W23) – Open-Source Logging for OpenAI by justintorre75 on Friday March 24, 2023 @12:08AM (#35284976)
This is exactly right, thanks a bunch for checking. Also, thanks for the note! We will add a SECURITY.md
Re:Helicone.ai (YC W23) – Open-Source Logging for OpenAI by kanyethegreat on Friday March 24, 2023 @02:26AM (#35285691)
> Do not reveal the problem to others until it has been resolved,

sorry, probably shouldn't have pointed that out. noted for future reference.

aside: big fan of Supabase, Paul! it's a pleasure using it!