OpenAI API keys leaking through app binaries

Re:OpenAI API keys leaking through app binaries by mousetree on Thursday April 13, 2023 @02:05PM (#35559536)

Could be as simple and cost-efficient as a Cloudflare worker that adds your key and passes the query along

[ Parent | on HN ]

Re:OpenAI API keys leaking through app binaries by lucakiebel on Thursday April 13, 2023 @03:05PM (#35560489)

Or a 5€/mo Hetzner server running Nginx, though Cloudflares free offering is very generous

[ Parent | on HN ]

Re:OpenAI API keys leaking through app binaries by jeffy90 on Thursday April 13, 2023 @03:25PM (#35560833)

You'd need some kind of authentication as well.

[ Parent | on HN ]

Re:OpenAI API keys leaking through app binaries by pxx on Thursday April 13, 2023 @05:39PM (#35562454)

Errrr, I assume your app can pass said authentication? If so, then it's meaningless; that's again a secret not under your control.

[ Parent | on HN ]

Re:OpenAI API keys leaking through app binaries by shri_krishna on Friday April 14, 2023 @01:53AM (#35565968)

You have to use Cloudflare Workers in Unbounded mode to do this (especially if you are streaming using EventSource or WebSockets). Bundled mode won't cut it as it closes connection after 50ms of Javascript execution.

[ Parent | on HN ]

Re:OpenAI API keys leaking through app binaries by orf on Friday April 14, 2023 @01:59PM (#35572595)

That’s 50ms of CPU execution, which does not include waiting for IO.

[ Parent | on HN ]