Hacker News Reader

> For those who do not want to paste OpenAIkeys to other peoples web pages

That should be everybody!

There are standard practices for delegating responsibility, never ever be pasting API keys into websites.

Why? It's easy and predictable. Generate a key with a spend cap plus short expiry and you're set. I much prefer that to having to fork over my email with an OAuth flow.

“Never ever” is crazy talk. Just put a couple of dollars in a prepaid account and assume it may all get used up. “Standard practices” won’t get you far in life.

I consider "Create a throwaway" to be in line with the guideline posted above. It does violate it literally but not in spirit - the guideline is not to use an API key with the ability to draw unlimited or a very large amount of funds.

Sure, but the comment I was replying to said “Everybody” and “never ever”.

Reply on news.ycombinator.com