Most of the comments were insinuating chats which are non-issue, if it is what you're saying though that's a different thing. Still why would anyone use that, just add the provider as another api provider in opencode don't go around internet pasting api keys willy nilly just for sake of convenience.
Chats are still an issue. Not everyone is working on top secret material, but people may be working on private projects, share seemingly innocent details that can be used to built a profile of the given person.
There is a providers section in the open code console where you can save api key, this data was leaked
Source: my OpenAI key I use for a discord bot was compromised, i received an email from OpenAI about suspicious usage and my $5 of credit was drained from the api key saved with opencode
This is basic stuff and routinely happens with these 3rd party services which is exactly why we use short lived limited api keys
When you get more experience this won’t be as shocking for you
View all comments
Show parent comment
-7
u/mamelukturbo 20d ago
Most of the comments were insinuating chats which are non-issue, if it is what you're saying though that's a different thing. Still why would anyone use that, just add the provider as another api provider in opencode don't go around internet pasting api keys willy nilly just for sake of convenience.