A bring-your-own-key desktop app ends up holding a lot of other people's secrets. Ours stores keys for speech recognition, translation and LLM providers in a JSON settings file under the user's profile. For the first versions they sat there in plain text. Anything that could read the user's files could read the keys: backup tools, sync clients, a... Weiterlesen: Storing users' API keys in a Windows desktop app with DPAPI, from Pyt…
Intelligence View
⚡ tsecurity.de Intelligence
Storing users' API keys in a Windows desktop app with DPAPI, from Python, without a dependency
A bring-your-own-key desktop app ends up holding a lot of other people's secrets. Ours stores keys for speech recognition, translation and LLM providers in a…
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili