3 ms·
OK but I mean I don't know them and it could have been someone pretending to be them, and probably it's easily possible to trick me about API keys. We are discu
by ftxbro 3y ago
OK but I mean I don't know them and it could have been someone pretending to be them, and probably it's easily possible to trick me about API keys. We are discussing it on a hacker news website do you seriously think tricks couldn't be hidden in a repo like that.
- bestcoder69 3y agohttps://github.com/search?q=repo%3Asimonw%2Fllm%20OPENAI_API_KEY&type=code https://github.com/search?q=repo%3Asimonw%2Fllm%20OPENAI_API... Let us know what you find.
- ftxbro 3y agoI found a few github issues related to api key security and management. I'm not 100% sure of your point.
- jabradoodle 3y agoI see no open issues. It's around 1k lines of python, audit the code if you care and rotate your keys. Or don't use it.
- JimDabell 3y agoDo you only use software by people you know? At some point there has to be an element of trust when you run software you downloaded over the Internet. If a small utility maintained by a well-known member of the developer community doesn’t qualify for that trust, then I think that rules out an awful lot of software that all of us here probably use on a day to day basis. This is not an extraordinary level of risk.
- ftxbro 3y ago> "well-known member of the developer community" OK sorry I didn't know them. I mean I usually use software that came with my computer or ones that I apt-install from the official ubuntu distribution. I know it's not perfect security but at least it's more than a hacker news link to a github pip. If I had to use other ones then it's usually from people I know.