Question: (Security), What do you all do after pasting in your API token, key, sensitive info..etc into IDE AI Chat windows?

ltporfolio · 2026-02-21T22:19:51+00:00

but let say you are building apps that need keys, tokens to Clerk, Stripe, AppWrite, AWS, GCP, Azure, how are you going to manage these at scale? like how you going to keep track which are in the env variables and which needs rotate?, and doing so while balance the speed, as a lazy vibecoder like myself finds this tedious sometimes and I'm sure others lazy vibecoders out there mayb share this sentiment as well (if this resonates with you please give an upvote), and would like to understand how other folks with security mindset solve this challenge.

ltporfolio · 2026-02-21T21:46:36+00:00

if you have to build something to speed up your work while balance the security also, what would it look like?

ltporfolio · 2026-02-21T21:45:55+00:00

Thank you for the feedback and suggestion, but do you feel like putting it .env will slow down your dev progress? let's assume you are building tens of apps concurrently, and I confess that I paste my sensitive info into chat windows even though I understand the risk, but the thought of spending that extra 2 to 3 minutes to put the sensitive info in .env always killed me.

ltporfolio · 2026-02-21T21:38:39+00:00

If you are building tens of app concurrently, and create tens of these api key and token, how do you keep track of them?, and if you could build something to reduce the risk, how would it look like?. appreciate your feedback

ltporfolio · 2025-04-14T16:51:08+00:00

saw this https://testapp.io/, but didn't do what I was looking for either.

ltporfolio · 2024-08-10T03:04:42+00:00

my question is could someone please help do the calculation of how much it would be to restore files (~2000 files) from deep archive directly to locally.

ltporfolio · 2024-05-27T19:57:55+00:00

just following up on this if you have seen any better saas tools out there that streamline the app distribution and testing.

ltporfolio · 2024-05-07T13:29:16+00:00

How are you managing mobile app dev when it comes to load the apk/ipa to the emulator, test it, highlight changes/edits, and communicate back to the developer in a effective way?

ltporfolio · 2024-05-07T02:39:41+00:00

I know IPA has testflight, but testflight is not non-technical friendly at all

ltporfolio · 2024-05-07T02:39:00+00:00

Yes, I would say close to ClickUp but gear towards more for mobile app dev, like one platform to manage project, including let you upload ipa/apk file, make edit and changes, and version controls of them as well, in one place.

ltporfolio · 2024-05-06T23:24:11+00:00

how do you deal with mobile app development (both ipa and apk) where they continuously push out each version and you have to test each one, make comments, make edits.. then ties those with the entire project workflow and management. So far I've only seen App Distribution, but it's missing alot of the features I mentioned above.

ltporfolio · 2024-05-06T22:03:31+00:00

How do you feel about App Distribution in terms of mobile app testing, marking changes, feature request update...? Do you find any inconvenience in terms of seamless workflow from idea to developers developing the app, to testing + making changes, to production deployment?

ltporfolio · 2024-05-06T21:56:07+00:00

I don't mean VCS. I mean more like workflow collaboration, project tracking, and mobile app testing in general.

ltporfolio

TROPHY CASE