logoalt Hacker News

dx410004/23/20251 replyview on HN

Hey Pete --

Love the article - you may want to lock down your API endpoint for chat. Maybe a CAPTCHA? I was able to use it to prompt whatever I want. Having an open API endpoint to OpenAI is a gold mine for scammers. I can see it being exploited by others nefariously on your dime.


Replies

petekoomen04/24/2025

appreciate the heads up but I think the widgets are more fun this way :)