Original caption
Cybersecurity expert reacts to viral security prompt. Rate limiting on all public endpoints — true, but if it’s a public endpoint, the user might not be authenticated yet. User-based rate limiting is limited. Strict input validation and sanitization — yes. Always make sure users are restricted in what they can enter. Secure API key handling — advice is accurate, but the most important thing is that whenever you’re making a call with an API key, that key should be on your server. Or even better, use short-lived credentials. #cybersecurity #buildinpublic #vibecoding