3 ms·

OpenAI’s API key page lets you issue new keys, see when they were last used, and withdraw them at any time. So this seems a bit paranoid.

• bastawhiz 4y ago
  Stripe's dashboard lets you do the same thing but like hell I'm giving you my secret key.
  • pmarreck 4y ago
    This is a standard way to grant API access in literally every piece of software that's provided an API access I've ever used in the last 5-10 years. I'm not sure what informs such paranoia.
    • bastawhiz 4y ago
      Absolutely incorrect. This is the literal purpose of OAuth.
• osigurdson 4y ago
  True, but it is still weird to paste your credentials into an unknown service.
  • sbarre 4y ago
    Yes of course, it certainly is. So before you do that, you should make the service not be unknown to you. Good thing this is open source!
    • osigurdson 4y ago
      I’m not sure if there is any way to tell if an open source service is actually using the open source code. It still comes down to trusting the url.