Two hosting platforms this month (Railway on 21 Oct, Northflank on 30 Oct) told customers to treat their environment var...

Two hosting platforms this month (Railway on 21 Oct, Northflank on 30 Oct) told customers to treat their environment variables as exposed.If it happens to you, order matters:1. Revoke the old key at the issuer (OpenAI, Anthropic, Stripe, Supabase). Editing the env var alone leaves it live.2. Create a new key and deploy it.3. Check the provider's usage and billing logs back to the incident date.4. Set a spend limit on every AI key.#infosec #devops #AppSec #vibecoding #indiehackers #AI

Read Original

Related