News for hackers. Stuff that matters.
Re:Ask HN: Do you trust AI agents with API keys / private keys? by para_parolu on Friday April 17, 2026 @11:59AM (#47807356)
Mitmproxy it to avoid giving model access to secrets.

My assistant lives in ubuntu vm. When I ask it to “check email” it uses imap with password “xyz” and fetches emails.

But my mail password is actually “abc”. Mitmproxy outside of vm replaces all “xyz” to “abc” for outgoing requests. And reverse for incoming

There are no comments on this comment yet.