Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Would you mind sharing how (in broad terms) your key got leaked? I'm always interested in stories like that as a point of comparison to my own (not great) security practices just so I know how reasonable I'm being.


It was a GitHub repo that I made public that I didn't realise had a key in it.

And yes,it's bad practice putting the keys in code to begin with, and I knew better.


Happens to the best of us Thanks for being willing to share, openness about "stupid" mistakes helps everyone else avoid them.


Biggest lesson is to setup billing alerts for any service like that. Put it 20% above normal usage and then you'll get a fairly immediate warning.

Won't save some of it if you're sleeping, but can definitely reduce the time someone has to run up bills.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: