Hacker News: minherz

New comment by minherz in "OpenAI’s accidental attack against Hugging Face is science fiction that happened"

minherz — Thu, 23 Jul 2026 18:28:13 +0000

The description of the attack is definitely reads as science fiction. It is hard to assess the details of the attack without information that was left outside of the short story that artistically described the incident.

Show HN: Catch abnormal usage of your API keys on Google Cloud

minherz — Mon, 22 Jun 2026 20:28:30 +0000

If you read Cloud Blog "Secure Gemini and Google API Keys" and wondered how to implement key hygiene advice, this codelab is for you. Look into the scripts to find rogue API keys. And learn how to automate unexpected usage spikes and block (potentially) compromised keys

Comments URL: https://news.ycombinator.com/item?id=48635680

Points: 2

# Comments: 1

New comment by minherz in "How to securely connect ADK agents to models on Cloud Run"

minherz — Fri, 29 May 2026 21:23:30 +0000

We’ve been building a demo of the multi-agent application that self-host a Gemma LLM for the Cloud Next '26 conference and found that while ADK has a built-in support when the agents calls other remote agents or MCP servers, there is nothing similar when it is configured to use a custom LLM endpoints to Cloud Run (running Ollama/vLLM). Cloud Run's built-in IAM auth is great for security, but the ADK's LiteLLM connector doesn't natively manage the Google-signed ID token lifecycle. This causes agents to fail with 401s once the initial token expires (usually at the 1-hour mark).

This post explores three ways to solve this: Static headers for ephemeral, scale-to-zero workloads. Subclassing LiteLLMClient in Python to dynamically intercept acompletion requests, fetch credentials via ADC, and handle automated token refreshing on HTTP 401 errors. Using a litellm-proxy sidecar container to abstract the authentication entirely. Would love to get any feedback on these patterns!

How to securely connect ADK agents to models on Cloud Run

minherz — Fri, 29 May 2026 21:23:30 +0000

Article URL: https://leoy.blog/posts/securely-connect-agents-to-models/

Comments URL: https://news.ycombinator.com/item?id=48329469

Points: 2

# Comments: 1

Securing Your Gemini and Google API Keys

minherz — Thu, 21 May 2026 19:08:23 +0000

Article URL: https://cloud.google.com/blog/topics/developers-practitioners/api-keys-are-open-secrets

Comments URL: https://news.ycombinator.com/item?id=48227542

Points: 3

# Comments: 0