Be careful where you put your API keys!

@empiricaltraining

478.6K followers · usually 1.1K views a post

Views

151.7K

Likes

3.4K

Comments

84

Shares

398

Why it worked

The video leverages a high-stakes, relatable fear for developers combined with a 'shock' factor demonstration that validates the warning immediately.

Summary

The creator reacts to a clip discussing the security risks of accidentally uploading API keys to public GitHub repositories. He then demonstrates how easily these keys can be found by performing a search on the platform.

Structure

1Reaction to a clip about API security
2Explanation of how keys are leaked
3Live demonstration of searching GitHub
4Warning to developers to secure their code

On-screen text

Be careful where you put your API keys!

Transcript

When you go on GitHub and just search API_KEY and it is terrifying or search actually search SK- which is the prefix for all the OpenAI keys and it is incredible how many OpenAI keys are published on GitHub right now. Let's see if this is true shall we? It looks to be true to me. Be careful what you will. This is for research purposes only. But if you are somebody that has API keys in your projects, make sure they are not publicly available.