Hacker News

Imfunguzo za Google API ntabwo zari amabanga, ariko rero Gemini yahinduye amategeko

Ibitekerezo

10 min read Via trufflesecurity.com

Mewayz Team

Editorial Team

Hacker News

Iyo "Rusange kubishushanyo" bihinduka inshingano z'umutekano

Mu myaka hafi makumyabiri, abitezimbere bubaka kuri ecosystem ya Google bize isomo ryoroshye ariko ryingenzi: Urufunguzo rwa Google API ntabwo ari amabanga mubyukuri. Niba winjije urufunguzo rwa YouTube Data API muri dosiye ya JavaScript, Google ntiyigeze ihagarika umutima. Niba urufunguzo rwa Ikarita yawe API rwerekanwe mububiko rusange bwa GitHub, igisubizo cyumutekano cyari ikintu gikomeye kandi cyibutsa gushiraho imipaka. Icyitegererezo cyose cyubatswe ku kwibwira ko izo mfunguzo zaba muri kode y'abakiriya, zerekanwa numuntu wese wafunguye DevTools.

Iyo filozofiya yumvikanye igihe kirekire. Urufunguzo rwa Ikarita API rwerekanwe nta mbogamizi z’urubuga rushobora gukuramo fagitire itunguranye, ariko ntabwo yari guhungabanya inyandiko z’abarwayi cyangwa gukuraho konti ya banki. Iradiyo yaturika yari ifite imari kandi irashobora gucungwa. Ibikoresho bya Google - imbogamizi zoherejwe, IP yerekana urutonde, imipaka ya kwota - yagenewe kubamo ibyangiritse, ntibibuza kwerekanwa burundu.

Hanyuma Gemini arahagera, amategeko arahinduka. Ikibazo nuko miriyoni yabatezimbere batabonye memo.

Umurage wo mu mutwe Umurage Wubu urimo Gutwika Abaterankunga

Ubunararibonye bwa Google buteza imbere Google byari byemewe nkana. Mugihe wakoze ikarita ya JavaScript API urufunguzo, ibyangombwa byagushishikarije kubireka muri HTML yawe. Icyitegererezo cyumutekano nticyari ibanga - byari ukubuza. Wafunga urufunguzo rwa domaine yawe, ugashyiraho ibipimo byerekana, hanyuma ukomeza. Iyi yari pragmatique yubuhanga: porogaramu zabakiriya kuruhande ntizishobora kubika amabanga kubakoresha biyemeje, Google rero yubatse sisitemu yemera ko ibyo ari ukuri.

> Ntabwo washyira urufunguzo rwibanga rwa Stripe muri repo rusange. Ariko urufunguzo rwa Ikarita yawe? Ibyo byari agaciro k'iboneza, ntabwo byari ibanga. Amakipe menshi yabibitse muri dosiye za config-zireba rubanda, dosiye ya README, ndetse no mubidukikije byabakiriya bihindagurika byashyizwe hamwe na NEXT_PUBLIC_ cyangwa REACT_APP_ nta gitekerezo cya kabiri.

Abashakashatsi bashinzwe umutekano basikana GitHub ibyangombwa byerekanwe bize gufata urufunguzo rwa Google API nabo muburyo butandukanye. Urufunguzo rw'ikarita rwasohotse ni ubushakashatsi buke. Urufunguzo rwa Gemini rwasohotse ni ikiganiro gitandukanye rwose.

Niki cyahindutse hamwe na Gemini - n'impamvu bifite akamaro

Google ya Gemini API ntabwo ikurikiza igitabo cyakinwe kera. Iyo ubyaye urufunguzo rwa Gemini API ukoresheje Google AI Studio, uba ukora ibyangombwa hamwe numwirondoro wibyago bitandukanye cyane kuruta Ikarita cyangwa urufunguzo rwa YouTube. Urufunguzo rwa Gemini rwemeza kugera kumurongo munini wururimi - serivisi igura Google umutungo wukuri wo kubara kandi ikaguha fagitire yikimenyetso, ntabwo ukoresheje page.

Ikirushijeho kunenga, urufunguzo rwa Gemini API ntirufite uburyo bumwe bwubatswe muburyo bwo kugabanya imiyoboro yatumaga urufunguzo rwa Google rubaho. Nta buryo bworoshye "funga ibi kurubuga rwurubuga rwanjye" byabuza uwagabye igitero wasanze urufunguzo rwawe mububiko rusange kugirango azenguruke ibyifuzo byabo kandi akoreshe igipimo cyawe - cyangwa imipaka yawe yo kwishyuza - uhereye kuri seriveri mu kindi gihugu.

Akaga ntabwo ari amafaranga gusa. Urufunguzo rwa Gemini rwashyizwe ahagaragara rushobora gukoreshwa mugukora ibintu byangiza, kugaba ibitero byihuse, cyangwa kubaka ibikoresho binyuranyije na serivisi ya Google - byose byishyurwa kuri konte yawe kandi bigasubira mu ndangamuntu yawe.

Mu 2024, abashakashatsi mu by'umutekano bagaragaje ibihumbi n'ibihumbi by'urufunguzo rwa Gemini API rwerekanwe kuri GitHub honyine, inyinshi muri zo zikaba ziri mu bubiko bwari bwarigeze kwakira izindi mfunguzo za Google API nta byabaye. Abashinzwe iterambere ntibakurikiranaga amahame yabo bwite - bakoresheje urugero rwo mumutwe Google ubwayo yari yarabatoje gukoresha. Ibidukikije byahindutse vuba kurenza ingeso.

Anatomy yo Guhura nimpanuka

Gusobanukirwa uburyo ibyo byerekanwa bibaho nintambwe yambere yo kubikumira. Uburyo bwo kunanirwa burahuza kuburyo budasanzwe mumakipe yingero zose:

  • Amateka yububiko bwanduye: Urufunguzo rwongewe kuri dosiye ya config, rwiyemeje, hanyuma rukurwaho - ariko amateka ya git akomeza gushakishwa ubuziraherezo. Abagabye igitero bakoresha ibikoresho nka truffleHog na gitleaks byumwihariko gucukura aya mateka.
    • Imiyoboro yitumanaho ryitsinda: Urufunguzo rusangiwe hejuru ya Slack, Discord, cyangwa imeri birangirira mumateka yubutumwa bwashakishijwe burenze gahunda yo kuzunguruka.

    Urudodo rusanzwe ntabwo ari uburangare - ni imiterere yo gusenyuka. Imyitwarire yari ifite umutekano murwego rumwe (Iterambere rya Google Ikarita) iteje akaga mubindi (iterambere rya Gemini), kandi guhuza ibisa nibyangombwa bituma itandukaniro ryoroshye kubura.

    Kubaka Umuco wo gucunga Amabanga Umunzani

    Imiterere ya Gemini nigikorwa cyingirakamaro cyo guhatira ikintu amatsinda menshi yiterambere yagiye asubika: kubaka ibikorwa remezo byo gucunga amabanga nyayo aho kuba ad-hoc. Ku matsinda mato, ibi birashobora kumva ari ugukabya, ariko ikiguzi cyo kwerekana ibyemezo - kwishura fagitire, guhagarika konti, kumenyesha kutubahiriza amakuru - birenze cyane imbaraga zo gukora ubu burenganzira.

    Gucunga amabanga agezweho akurikiza inzira zitandukanye. Kurwego rwibikorwa remezo, ibikoresho nka HashiCorp Vault, Umuyobozi wa AWS Amabanga, cyangwa Google Ibanga rya Google bitanga ububiko bwihariye, bugenzurwa kandi bufite ubushobozi bwo kuzunguruka. Ibi ntabwo ari kubigo binini gusa - serivisi nka Doppler na Infisical zizana uburyo bumwe mumatsinda yabaterankunga babiri cyangwa batatu kubiciro byoroshye.

    💡 DID YOU KNOW?

    Mewayz replaces 8+ business tools in one platform

    CRM · Invoicing · HR · Projects · Booking · eCommerce · POS · Analytics. Free forever plan available.

    Start Free →

    Kurwego rwimyandikire, disipuline iroroshye: ibyangombwa ntibigera bikora kode yinkomoko. Guhagarara byuzuye. Ntabwo mumirongo yatanzwe-ibitekerezo, ntabwo murugero rwamadosiye, ntabwo ari mubizamini byo kugerageza bifite agaciro-gasa nimpimbano bigaragara ko ari ukuri. Mbere yo kwiyemeza gufata ibikoresho bikoresha nka gutahura-amabanga cyangwa gitleaks gufata amakosa mbere yo kugera kububiko bwa kure. Ibi bifata bifata iminota yo gushiraho hamwe nimyaka yo guhagarika ibyabaye byo gusubiza.

    > Amahuriro nka Mewayz , ahuza module 207 yubucuruzi munsi yumutaka umwe wimikorere, yubatswe hamwe niri hame shingiro ryabo: ibyangombwa hamwe nibikorwa bya API bicungwa kurwego rwa platifomu, ntabwo bikwirakwijwe muburyo bumwe cyangwa ibidukikije byabateza imbere. Iyo urufunguzo rukeneye kuzunguruka, bibaho rimwe, ahantu hamwe, bitarenze ingingo cumi nindwi zitandukanye zo guhuza.

    Igitero cyo Kwishyuza Vector: Abaterankunga b'icyitegererezo badakabije

    Ibiganiro byumutekano bikunze kwibanda ku kutubahiriza amakuru no kubiherwa uburenganzira. Ikibazo cyo kwerekana Gemini cyongeyeho uburyo bwa gatatu bwiterabwoba bukwiye kwitabwaho kimwe: uburiganya bwo kwishyuza ku gipimo.

    Indimi nini yerekana urugero ihenze. GPT-4 na Gemini Ultra itunganya ibimenyetso ku bice byijana, ariko mubipimo - ibihumbi byifuzo, amamiriyoni yikimenyetso - ibyo bice byiyongera kumadorari ibihumbi byihuse. Abagabye igitero bavumbuye urufunguzo rwa AI API ntibashaka byanze bikunze amakuru yawe. Bashaka kubara kubuntu. Bazakoresha ibyangombwa byawe kugirango bakore serivisi zabo bwite za AI, bagurishe ubushobozi bwo gufata umwanzuro, cyangwa kugerageza-gusaba ibyo basabye - byose mugihe fagitire ikujya.

    Iterambere rimwe ryanditse kubyuka kugeza kuri $ 23,000 byurufunguzo rwa Gemini rwerekanwe mububiko rusange mumasaha atarenze atandatu. Igitero cyahise gihita gikoresha icyo gikorwa, gikora imirimo myinshi yinjiza cyane kugeza igihe Google yiboneye uburiganya. Iterambere amaherezo yarangije kwishyurwa nyuma yigihe kirekire cyamakimbirane, ariko konti yahagaritswe muri kiriya gihe, itwara serivisi zibyara umusaruro.

    Iyi niyo mpamvu imenyekanisha ryo kwishyuza hamwe na kwota ntarengwa bidasimburwa no gucunga neza amabanga - ni umurongo wanyuma wo kwirwanaho wizera ko utazigera ukenera. Gushiraho imipaka ikoreshwa buri kwezi kuri konti ya AI API ni imbonerahamwe yimbonerahamwe, ariko uburinzi nyabwo ni ukureba ko ibyangombwa bitigera bisohoka mbere.

    Intambwe zifatika kumakipe akora Inzibacyuho

    Niba itsinda ryanyu ryarimo ryubaka Google API muburyo bwa kera bwo mumutwe none ukaba wongeyeho Gemini kumurongo, dore urutonde rwukuri rwo gukosora:

    1. Kugenzura ububiko buriho ako kanya. Koresha truffleHog cyangwa gitleaks kurwanya amateka yawe yuzuye ya git, ntabwo ari UMUTWE uriho gusa. Wibande cyane cyane kububiko ubwo aribwo bwose bwakoresheje Google API mu bihe byashize.
    2. Kuzenguruka urufunguzo rwose rwerekanwe. Niba urufunguzo rwa Gemini rwarigeze rugaragara mubyo wiyemeje, fata ko byangiritse. Kuvanaho no kubyara bundi bushya. Ntugerageze gusuzuma niba hari "mubyukuri" wabibonye.
    3. Shyira mubikorwa gusikana mbere yo kwiyemeza.
    4. Shiraho ibarura ryingenzi. Menya serivisi zifite ibyangombwa, nyirabyo, mugihe ziheruka kuzunguruka, n'aho zikoreshwa. Urupapuro rusesuye ni intangiriro nziza; umuyobozi wibanga niho yerekeza.
    5. Shiraho imenyekanisha ryo kwishyuza nimbibi zikomeye.
    6. Andika uburyo bushya bwo mu mutwe mu buryo bweruye.

    Isomo Ryagutse Kubucuruzi-Bishingiye ku bucuruzi

    Imiterere ya Gemini yerekana uburyo bugira ingaruka kubucuruzi ubwo aribwo bwose bwinjizwa cyane nabandi bantu batatu: urubuga rugenda rwiyongera, kandi ibisabwa kugirango umutekano uhagarare hamwe nabo, ariko ingeso zinzego zamakipe zikoresha izo mbuga akenshi ntizigendana. Icyari gifite umutekano ejo ni akaga uyumunsi, kandi ikinyuranyo kiri hagati yibi bihugu byombi niho habaho kurenga.

    Ibi birakaze cyane kubucuruzi bukora ibintu bigoye. Isosiyete ikoresha ibiranga imbaraga za AI muri serivisi zabakiriya, isesengura, kubyara ibikubiyemo, hamwe nibyifuzo byibicuruzwa bishobora kugira Gemini ihuza mubice icumi bitandukanye - buri kimwe gishobora kuba ikintu cyerekana niba ibyangombwa bikemuwe bidahuye. Igisubizo ntabwo aribyiza gusa byabateza imbere; ni ubwubatsi. Kwinjira byemewe bigomba guhuzwa, kugenzurwa, no kugengwa kurwego rwa platform.

    Sisitemu igezweho yubucuruzi igezweho irategurwa hamwe nibitekerezo. Iyo Mewayz ihuza ubushobozi bwa AI muri suite yayo - kuva mubikorwa bya CRM byubwenge bikora kugeza kubisesenguye byikora muri ecosystem ya 207-module - gucunga ibyemezo bikorerwa mubikorwa remezo, ntabwo ari urwego rusaba. Abategura module kugiti cyabo ntibakora urufunguzo rwa API mbisi; bagera kubushobozi binyuze murwego rwo gukuramo rushyira mubikorwa politiki yo kuzunguruka, kugenzura ubugenzuzi, no kugabanya radiyo iturika niba hari ibitagenda neza. Ubu ni ubwubatsi ibihe bya Gemini bisaba: ntabwo ari ingeso nziza gusa, ahubwo sisitemu nziza ituma ingeso nziza ihitamo gusa.

    Google ntabwo yakoze ikosa ryubaka moderi yemewe ya API yemewe ya Ikarita na YouTube. Urwo rugero rwari rukwiye kuri izo serivisi. Ariko nkuko ubushobozi hamwe nigiciro cyibiciro bya API bigenda bihinduka kuburyo bugaragara - kandi nkuko AI APIs igereranya wenda ingingo ihindagurika cyane muri ubwo bwihindurize - inganda zose zigomba gusubiramo ibyangiritse. Abashinzwe iterambere batera imbere muri ibi bidukikije ntibazaba abize amategeko ashaje neza, ariko abemera igihe amategeko yahindutse muburyo bukomeye.

    Ibibazo bikunze kubazwa

    Kuki urufunguzo rwa Google API rwabonwaga ko rufite umutekano rwo gushyira ahagaragara kumugaragaro?

    Google yateguye byinshi muri API zayo - Ikarita, Youtube, Ahantu - kugirango ikoreshwe kuruhande rwabakiriya, bivuze ko urufunguzo rwinjijwe nkana muri code yimbere-igaragara kubantu bose. Icyitegererezo cyumutekano cyashingiye kubibuza gukoreshwa nka lisiti yemewe na cheque yoherejwe aho kuba ibanga ryingenzi. Kumyaka, urufunguzo rwagaragaye rwafatwaga nkikibazo cyimiterere, ntabwo ari intege nke zisaba kuzunguruka vuba.

    Niki cyahindutse mugihe Google yatangizaga urufunguzo rwa Gemini API?

    > Guhinduranya bivuze ko abitezimbere bagomba noneho gufata urufunguzo rwa Gemini hamwe na disipuline imwe nkibyangombwa bya AWS cyangwa urufunguzo rwibanga rwa Stripe, ukabika seriveri kuruhande kandi ntanarimwe mubireba abakiriya.

    Nigute abashinzwe iterambere bagomba gucunga neza urufunguzo rwa API kubikorwa bya AI uyumunsi?

    Imyitozo myiza nukubika urufunguzo rwa AI API rwose nkibihinduka byibidukikije kuri seriveri, ntabwo bigeze muri dosiye igenzurwa na verisiyo cyangwa abakiriya bundles. Koresha umuyobozi wibanga, uzenguruke urufunguzo buri gihe, kandi ushireho imipaka yo gukoresha kurwego rwabatanga. Amahuriro nka Mewayz - OS ya 207-module yubucuruzi kuri $ 19 / mo iboneka kuri app.mewayz.com - ikora imicungire yicyemezo cya API mubikorwa remezo kugirango amakipe adahuza intoki muri serivisi.

    Nakora iki niba namaze kwerekana impanuka urufunguzo rwa Gemini API?

    Kuraho urufunguzo rwangiritse ako kanya ukoresheje Google Cloud Console hanyuma utange umusimbura mbere yo gukora ikindi kintu cyose. Kugenzura urupapuro rwawe rwo kwishyiriraho ibicuruzwa bitunguranye bishobora kwerekana urufunguzo rwasaruwe. Noneho subiramo codebase yawe, CI / CD ibidukikije bihindagurika, hamwe nububiko rusange rusange kubindi byangombwa byamenyekanye. Fata ibyabaye nkuko ubishaka ibyemezo byo kwishyura - fata ko byabonetse kandi ubikore.