A bring-your-own-key desktop app ends up holding a lot of other people's secrets. Ours stores keys for speech recognition, translation and LLM providers in a JSON settings file under the user's profile. For the first versions they sat there in plain text. Anything that could read the user's files could read the keys: backup tools, sync clients, a... Weiterlesen: Storing users' API keys in a Windows desktop app with DPAPI, from Pyt…
Intelligence View
⚡ tsecurity.de Intelligence
Storing users' API keys in a Windows desktop app with DPAPI, from Python, without a dependency
A bring-your-own-key desktop app ends up holding a lot of other people's secrets. Ours stores keys for speech recognition, translation and LLM providers in a…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
8 sources
CVE-2026-21381 | Qualcomm Snapdragon Auto up to XRV9209 Connection buffer over-read
7 more sources
VVulDB Updates2 hours agoCVE-2026-21378 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read VVulDB Updates2 hours agoCVE-2026-21376 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read VVulDB Updates2 hours agoCVE-2026-21375 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read VVulDB Updates2 hours agoCVE-2026-21373 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read VVulDB Updates2 hours agoCVE-2026-21371 | Qualcomm Snapdragon Compute up to XG101039 buffer over-read VVulDB Updates2 hours agoCVE-2026-21374 | Qualcomm Snapdragon Compute up to XG101039 buffer over-read
+1
7 sources
Playing Super Mona on the GitHub Universe 2026 badge
6 more sources
GGitHub1 hour agoGitHub Release: openai/codex vrust-v0.166.0 (29.10.2026) GGitHub1 hour agoGitHub Release: anomalyco/opencode v2.2.2 (29.10.2026) GGitHub45 min. agoGitHub Release: can1357/oh-my-pi v18.14.0 (29.10.2026) GGitHub1 hour agoGitHub Release: falcosecurity/falco v0.45.2 (29.10.2026) GGitHub3 hours agoGitHub Release: rustdesk/rustdesk v1.5.1 (29.10.2026) GGitHub3 hours agoGitHub Release: greenbone/openvas-scanner v23.52.8 (29.10.2026)
7 sources
Microsoft Edge is first to get Windows 11's new app launch speed boost
6 more sources
IIT Security News56 min. agoMicrosoft releases out-of-band Windows fixes with certificate updates WWindows Archives1 hour agoMicrosoft Says Edge is the First Windows Browser to Support Accelerated App Launches WWindows Latest1 hour agoMicrosoft killed Windows 10 to push Windows 11, but Windows sales crashed 27% as holdouts still refuse to switch GGoogle Alert1 hour agoKB5127936: Microsoft korrigiert Remote-Desktop-Fehler in Windows 11 - ad-hoc-news.de WWinFuture News2 hours agoWindows 11: Microsoft behebt Fehler bei Remote-Desktop-Verbindungen TTechRepublic2 hours agoMicrosoft Offers Buyouts to 60,000 Staff in Windows, Copilot
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4305233/secure-programming/storing-users-api-keys-in-a-windows-desktop-app-with-dpapi-from-python-without-a-dependency/