Launch HN: Integuru (YC W24): Reverse-Engineer Internal APIs Using LLMs

Re:Launch HN: Integuru (YC W24): Reverse-Engineer Internal A... by 383toast on Wednesday October 30, 2024 @12:24AM (#41991966)

What's the stance on security for handling private tokens/cookies/sessions/etc?

[ Parent | on HN ]

Re:Launch HN: Integuru (YC W24): Reverse-Engineer Internal A... by richardzhang on Wednesday October 30, 2024 @12:30AM (#41991989)

This is certainly an important question. We use a third-party vault to store tokens/keys.

[ Parent | on HN ]

Re:Launch HN: Integuru (YC W24): Reverse-Engineer Internal A... by mormegil on Thursday October 31, 2024 @07:08AM (#42005577)

My first thought. Do I understand correctly that the HAR with all my session cookies, username&passwords&etc (not mentioning possibly sensitive data in the service) is sent to OpenAPI? Well… just… be aware of it if you want to try this.

[ Parent | on HN ]