4 ms·

It's a static web app, you can host it yourself Note for anybody else wondering, it's not open source, you have to download a binary. More FAQ by clicking the

It's a static web app, you can host it yourself Note for anybody else wondering, it's not open source, you have to download a binary. More FAQ by clicking the Gift (?) icon at the top and scrolling down.

seanw444 4y ago
Moving on...
Terretta 4y ago
Entrust your AI key to a closed binary? Bot what could possibly go wrong?
- kilgnad 4y ago
  Careful with the sarcasm. Only positive vibes are allowed on showHN or the admin goes ballistic. I've seen it happen.
  - screamingninja 4y ago
    > Only positive vibes are allowed on showHN Sarcasm?
    - kilgnad 4y ago
      No. It's real. According to dang, showHN is suppose to be a "safe space". You could make absolute crap, everyone is suppose to be positive about it. Dang will flag people who don't do this. Nothing dang can do though is hundreds of people hate it though. Things with actual security issues for example he'll likely just be quiet about it.
      - screamingninja 4y ago
        That is unfortunate. You would think that the intent behind posting ShowHN is to get constructive feedback but based on what you described, it appears that the expectation is to make those creators feel good instead.
        kilgnad 4y ago
        You still can, just have to be excessively nice about it. Huge emphasis on excessively.
- xslvrxslwt 4y ago
  I'm not defending anyone here but just strace the program if you're really worried about it. If you don't know what strace is: it exports every syscall the program has made, so you'd see if it's doing anything suspicious.
  - kilgnad 4y ago
    Or don't use it, and warn others of the issues and let them decide if they want to use it.
    - xslvrxslwt 4y ago
      Well I don't see why not, also I don't see which issues if you're not using it as you couldn't encounter any to begin with. Being closed source is not an issue.
- vishal0123 4y ago
  What could go wrong? It is static site and there is no backend, so the key is only in the browser.
worldsavior 4y ago
It is open source. Your browser retrives all the JS and html sources. Even if it were somehow closed source, it doesn't really matter. You can view web requests and other, and see for yourself.
- xslvrxslwt 4y ago
  What Just because you can see HTML and JS that THE BACKEND SENT doesn't mean you can see the actual logic (code)
  - arthur_sav 4y ago
    This is a static website, no backend.
  - filoleg 4y ago
    All logic is clientside in the downloaded JS and HTML. After the initial page load, it should send nothing to the backend of the website, only API calls to chatGPT API itself. There is no actual backend with logic, it only serves static HTML+JS+assets. Theoretically, you should be able to block any outgoing connections to the website domain (after it loads all necessary HTML and JS), and it should still work fine. Saying "theoretically" because it might attempt delay-loading some static assets, but you get the idea. No idea how this specific website functions, as I haven't looked deep into it yet, but that's the principle behind "static websites" like this one.
- kilgnad 4y ago
  The ability to reverse engineer the source through the browser doesn't make something qualify as open source anymore than reverse engineering a binary with some other tool. I can view web requests but let's say on the 365th web request it sends my API key to an unknown location. How would I know if this was closed source?
  - RohMin 4y ago
    Forgive me if I’m just being naive but couldn’t you look at the source from the browser dev tools?
tottenval 4y ago
If you're looking for an open source ChatGPT UI, I built one with React + Typescript: https://github.com/cogentapps/chat-with-gpt https://github.com/cogentapps/chat-with-gpt https://chatwithgpt.netlify.app/ https://chatwithgpt.netlify.app/
- singularity2001 4y ago
  why is the System Prompt reset after a few seconds!?
  - tottenval 4y ago
    Just pushed a fix for this (refresh to get the update), let me know if it happens again!

seanw444 4y ago

Moving on...

Terretta 4y ago

Entrust your AI key to a closed binary? Bot what could possibly go wrong?

kilgnad 4y ago
Careful with the sarcasm. Only positive vibes are allowed on showHN or the admin goes ballistic. I've seen it happen.
- screamingninja 4y ago
  > Only positive vibes are allowed on showHN Sarcasm?
  - kilgnad 4y ago
    No. It's real. According to dang, showHN is suppose to be a "safe space". You could make absolute crap, everyone is suppose to be positive about it. Dang will flag people who don't do this. Nothing dang can do though is hundreds of people hate it though. Things with actual security issues for example he'll likely just be quiet about it.
    - screamingninja 4y ago
      That is unfortunate. You would think that the intent behind posting ShowHN is to get constructive feedback but based on what you described, it appears that the expectation is to make those creators feel good instead.
      - kilgnad 4y ago
        You still can, just have to be excessively nice about it. Huge emphasis on excessively.
xslvrxslwt 4y ago
I'm not defending anyone here but just strace the program if you're really worried about it. If you don't know what strace is: it exports every syscall the program has made, so you'd see if it's doing anything suspicious.
- kilgnad 4y ago
  Or don't use it, and warn others of the issues and let them decide if they want to use it.
  - xslvrxslwt 4y ago
    Well I don't see why not, also I don't see which issues if you're not using it as you couldn't encounter any to begin with. Being closed source is not an issue.
vishal0123 4y ago
What could go wrong? It is static site and there is no backend, so the key is only in the browser.

worldsavior 4y ago

It is open source. Your browser retrives all the JS and html sources. Even if it were somehow closed source, it doesn't really matter. You can view web requests and other, and see for yourself.

xslvrxslwt 4y ago
What Just because you can see HTML and JS that THE BACKEND SENT doesn't mean you can see the actual logic (code)
- arthur_sav 4y ago
  This is a static website, no backend.
- filoleg 4y ago
  All logic is clientside in the downloaded JS and HTML. After the initial page load, it should send nothing to the backend of the website, only API calls to chatGPT API itself. There is no actual backend with logic, it only serves static HTML+JS+assets. Theoretically, you should be able to block any outgoing connections to the website domain (after it loads all necessary HTML and JS), and it should still work fine. Saying "theoretically" because it might attempt delay-loading some static assets, but you get the idea. No idea how this specific website functions, as I haven't looked deep into it yet, but that's the principle behind "static websites" like this one.
kilgnad 4y ago
The ability to reverse engineer the source through the browser doesn't make something qualify as open source anymore than reverse engineering a binary with some other tool. I can view web requests but let's say on the 365th web request it sends my API key to an unknown location. How would I know if this was closed source?
- RohMin 4y ago
  Forgive me if I’m just being naive but couldn’t you look at the source from the browser dev tools?

tottenval 4y ago

If you're looking for an open source ChatGPT UI, I built one with React + Typescript: https://github.com/cogentapps/chat-with-gpt https://github.com/cogentapps/chat-with-gpt https://chatwithgpt.netlify.app/ https://chatwithgpt.netlify.app/

singularity2001 4y ago
why is the System Prompt reset after a few seconds!?
- tottenval 4y ago
  Just pushed a fix for this (refresh to get the update), let me know if it happens again!