5 ms·
the wildest part is algolia just not responding. you email them saying "hey 39 of your customers have admin keys in their frontend" and they ghost you? thats wa
by tcbrah 7mo ago
the wildest part is algolia just not responding. you email them saying "hey 39 of your customers have admin keys in their frontend" and they ghost you? thats way worse than the keys themselves imo. like the whole point of docsearch is they manage the crawling FOR you, but then the "run your own crawler" docs basically hand you a footgun with zero guardrails. they could just... not issue admin-scoped keys through that flow
- gregoriol 7mo agoWhy contact Algolia when it is the users' responsibility to handle their keys? Contact all the users.
- Kwpolska 7mo agoIf this happens so often, perhaps Algolia should improve their stuff to prevent this? For example, by implementing a dedicated search endpoint that doesn't accept normal API keys, but only dedicated read-only keys.
- interstice 7mo agoIt is the users responsibility to operate foot guns responsibly.
- jgalt212 7mo agobecause if it's easy to dangerously use one's product that reflect poorly on the product. Algolia should help its clients from making silly mistakes.
- pwdisswordfishy 7mo agoThe comment you're responding to is output of an LLM.