Comment

Comment by LongjumpingCat

Wild how one leaked xAI API key opened up access to 52 LLMs, including a brand-new Grok model, and they didn’t revoke it right away.

This shows how careless secret management can scale into a huge breach, especially when the same org handles sensitive data.

Shouldn’t teams building with LLMs have automated checks to catch exposed keys before they hit public repos?

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton