logoalt Hacker News

x______________ • today at 10:54 AM • 6 replies • view on HN

Is "paste your OpenAI API key" the new form of "paste your credit card number with exp/code" for example, to check if its been compromised?


Replies

draugadrotten • today at 11:42 AM

For those who do not want to paste OpenAIkeys to other peoples web pages, there are local solutions.

For example, these audiobook generators runs fully offline. https://github.com/Finrandojin/alexandria-audiobook https://github.com/senigami/audiobook-studio.pinokio https://github.com/topics/audiobook-generator

➕ show 2 replies
yohannparis • today at 2:00 PM

You can generate a specific API key, and make sure to monitor it by setting a budget limit to it. They should explain this to people in their form to avoid people pasting their main key.

1vuio0pswjnm7 • today at 3:41 PM

The original "Have I Been Pwned" ploy

Send me your data and I will check and see if anyone else has it

Now I have your data but that doesn't count

walrus01 • today at 2:17 PM

There was a guy who made a "has your SSH key been compromised? Paste your private key here" website as a joke, which lasted about a week until his low budget host killed it.

https://www.reddit.com/media?url=https%3A%2F%2Fi.redd.it%2Fx...

simianwords • today at 4:36 PM

This shouldldve been a Plugin or Sign in with ChatGPT thing!

➕ show 1 reply
Onavo • today at 4:21 PM

They do offer an OAuth method.