Whoa. Who at Google thought providing this as an example of how to test your API... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		iaresee 5 months ago \| parent \| context \| favorite \| on: Gemini CLI Whoa. Who at Google thought providing this as an example of how to test your API key was a good idea? https://imgur.com/ZIZkLU7 This is shown at the top of the screen in https://aistudio.google.com/apikey as the suggested quick start for testing your API key out. Not a great look. I let our GCloud TAM know. But still.

nickysielicki 5 months ago | [–]

it's wrapped in TLS, is ok.

asadm 5 months ago | [–]

What's wrong here?

iaresee 5 months ago | [–]

Don't put your API keys as parameters in your URL. Great way to have them land in server logs, your shell history, etc. You're trusting no one with decryption capabilities is doing logging and inspection correctly, which you shouldn't.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact