Hetzner DNS Zonen-Migration: Zum Thema Api-Key bin ich etwas verwirrt. In der Regel nutze ich das nicht, aber da alles so lange her ist: woran sehe ich, ob ich api-keys bei einzelnen Domains nutzte? Erkenne ich das im Zonefile? Ich könnte einen Kompass brauchen, der mir die richtige Richtung zeigt. Beispiele für die Nutzung von Apikeys würden mich wohl auch Erinnern machen, ob ich welche nutzte.

#dns #hetzner #zonefileMigration #apikey

Long story short: #Google once said that you could publish this #API #key. Then Google changed the #software and used the key for #billing with #Gemini, its in-house #AI. Of course, there are now many leaked keys and high costs that Google now wants to collect from the owners of the keys. Don't let Google fool you!

see: trufflesecurity.com/blog/googl…

#news #software #money #customer #service #fool #wtf #omg #economy #bigtech #evil #problem #cybersecurity #security #marketing #fail #company #politics #responsibility #bill #cost #leak #apikey

Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co.

Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true.

Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co.

Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true.

金のニワトリ (@gosrum)

작성자는 API 키 유출 위험을 줄이기 위한 아이디어로 특정 IP 주소나 MAC 주소에서만 API를 사용 가능하도록 제한하는 방안을 제안했습니다. 이 방법은 키가 유출되더라도 허가된 장비 외부에서는 사용을 막아 보안성을 높일 수 있다는 취지의 제언입니다.

https://x.com/gosrum/status/2024040131926122803

#api #security #apikey #devops

金のニワトリ (@gosrum) on X

素人的な考えとして、特定のIPアドレスとかMACアドレスからしか使えないようにするとかできないのかな? そうすればAPIキーが流出しても、他の人は使えないのでは?

X (formerly Twitter)
API GatewayのAPIキーをSecrets Managerでうまく管理できないかを検討してみた - Qiita

はじめに API GatewayではAPIキーによる認証を設定できます。APIキーを必須としてデプロイしたAPIでは、配布したAPIキーをヘッダーでx-api-keyと指定してリクエストしないと403 Forbiddenで応答されます。 APIキーを使った認証は実装が簡単...

Qiita
The fact that I needed v2 search means ...

You cannot #resolve #Misskey or #Sharkey without #apikey / auth #token
=> i.e. you need to be logged in to the cross domain instance

correct me #askfedi
But this s-u-...... is not very cool

Oh why oh why

Tạo công cụ quản lý API key và tính phí theo mức sử dụng cho sản phẩm SaaS. Holdify tự động cấp key, đồng bộ phân quyền theo gói đăng ký, kiểm soát rate limit và theo dõi usage để thanh toán. Kết nối với nhà cung cấp thanh toán (hiện hỗ trợ Polar), tích hợp dễ dàng qua SDK chỉ với một dòng code. Dành cho các nhà phát triển API muốn tiết kiệm thời gian. #SaaS #API #Holdify #DeveloperTool #CôngCụSaaS #APIKey #UsageBasedBilling

https://www.reddit.com/r/SaaS/comments/1pzt29l/i_built_a_tool_to_handl

Sản phẩm beta dính phản ứng bất ngờ về API key: Người dùng cảnh báo nhau đừng nhập vì sợ chi phí phát sinh. Dù có mã hóa, minh bạch, sự tin tưởng không chỉ đến từ kỹ thuật mà cần giao tiếp rõ ràng. Làm sao bạn giảm xa lánh và xây niềm tin với người dùng khi mới khởi đầu?

#Founders #TrustBuilding #APIKey #Startups #KinhNghiệmKhởiNghiệp #XâyDựngNiềmTin #CôngNghệ #LậpTrình

https://www.reddit.com/r/SaaS/comments/1py76uj/how_did_you_build_trust_when_your_product/

"Lets add support for fetching a single #steam game and add it to our existing json it'll be easy"

clicky

Steam:     
You will bow before my #rules muahha
* no hashicon if you don't supply a #apikey #userid AND #own the game hahahahahah
* header icons from
imgSrc = `https://cdn.cloudflare.steamstatic.com/steam/apps/${game.appid}/header.jpg`;
} else {
imgSrc = `http://cdn.akamai.steamstatic.com/steam/apps/${game.appid}/header.jpg`;
}
?? We don't do that here..

tsk tsk tsk.
I added new hashes to my images so you have to fetch em at runtime poor mortal

Ah yes.
I'm having fun 

#repost •acws #acws #CodeAlcea
Oh, the humanity! 😱 Someone dared to use a cutting-edge tool to generate the most thrilling CRUD app ever, but was thwarted by the menacing, labyrinthine process of acquiring a Gemini API key. 💀 Clearly, modern #technology is failing humanity, one API key at a time. 😂
https://ankursethi.com/blog/gemini-api-key-frustration/ #APIkey #CRUDapp #HackerNews #innovation #HackerNews #ngated
Getting a Gemini API key is an exercise in frustration — Ankur Sethi's Internet Website

Ankur Sethi's Internet Website