News for hackers. Stuff that matters.
Re:OpenAI API keys leaking through app binaries by hospitalJail on Thursday April 13, 2023 @01:08PM (#35558641)
> is to have your app only communicate with a backend you own and call the openAI from there.

I'm a bit baffled anyone puts anything secret on software people are using. This service needs to be online anyway.

Anyway, seems like a lazy programmer thing.

Re:OpenAI API keys leaking through app binaries by judge2020 on Thursday April 13, 2023 @02:19PM (#35559775)
Running a server even to proxy requests takes a lot of work, since you now need your own auth system and have to manage scaling. If you take the plunge, a serverless architecture like Cloudflare Workers makes scaling automatic, but you still have to do some heavy lifting to either have an API key or auth system and abuse protections (otherwise they just spam your API instead of directly stealing your OpenAI api key).
Re:OpenAI API keys leaking through app binaries by counttheforks on Thursday April 13, 2023 @02:28PM (#35559922)
You probably don't need to scale if all you're doing is auth and proxying requests. If you get to the point where you do need to scale, you can probably afford to figure it out.
Re:OpenAI API keys leaking through app binaries by psychphysic on Thursday April 13, 2023 @03:24PM (#35560822)
Er.... Just ask gpt4 to how to do it obviously.
Re:OpenAI API keys leaking through app binaries by politician on Thursday April 13, 2023 @02:19PM (#35559789)
Or, a lazy ChatGPT auto-generated code copy-paste thing.