Secrets Exposed: The Art of Keeping API Keys Safe From Developer Slip-Ups with Dante Lex

Secrets Exposed: The Art of Keeping API Keys Safe From Developer Slip-Ups with Dante Lex

Author: Skill Issue Studios May 2, 2024 Duration: 55:19

In this episode of Whiskey Web and Whatnot, hosts RobbieTheWagner and Charles William Carpenter III are joined by Dante, the founder of Onboardbase and hi.new. Dante shares insights on building security infrastructure for distributed teams and discusses the common mistakes businesses make by trusting developers with sensitive API keys and database credentials.

The episode also features a whiskey tasting segment where Robbie, Charles, and Dante taste and review Woodford Reserve double oaked whiskey. Additionally, the conversation touches on various topics, including TypeScript preferences, Tailwind CSS, git practices, and potential careers outside of tech. Dante also talks about the challenges of being a solo founder and the current state of raising funds from VCs and angel investors.

The episode wraps up with a casual chat about Manchester United's current performance and Dante's potential career choices if he weren't in tech.

Key Takeaways

  • [00:32] - Meet Dante: Security Infrastructure for Distributed Teams
  • [02:10] - Diving into Whiskey Tasting: Woodford Reserve Double Oaked
  • [10:06] - Tech Talk: TypeScript, Tailwind, Git, and VS Code Preferences
  • [20:10] - Deep Dive into Onboardbase and Proxy Vault
  • [28:08] - Exploring Untapped Niches: Security and Energy
  • [29:11] - The Unforeseen Impact of AI on Security
  • [30:22] - The Realities of Cybersecurity and Compliance
  • [33:07] - Open Source Security Tools: A Game Changer
  • [34:56] - The Journey of Starting a Software Company
  • [36:56] - The Challenges and Strategies of Fundraising
  • [42:13] - Navigating the Complexities of Soccer Fandom
  • [49:30] - Career Alternatives: Content Creation and Beyond
  • [52:31] - Wrapping Up: Beta Invites and Open Source Contributions

Links

Connect with our hosts

Subscribe and stay in touch

Whiskey Web and Whatnot Merch Enjoying the podcast and want us to make more? Help support us by picking up some of our fresh merch at https://whiskey.fund/⁠.


There's a certain alchemy that happens when you combine deep technical expertise with the warmth of a good conversation, and that's exactly what you'll find in Whiskey Web and Whatnot. Hosts Robbie Wagner, Charles William Carpenter III, and Adam Argyle bring decades of collective experience to the table, but they leave the lecture format at the door. Instead, each episode feels like pulling up a chair with colleagues who are just as passionate about the craft of building for the web as they are about the nuanced flavors in a glass of whiskey. The discussion naturally flows between the concrete details of modern development-like navigating JavaScript frameworks, CSS architecture, or the practical realities of agentic AI and new coding tools-and the broader, human aspects of a software engineering career. This podcast from Skill Issue Studios is built on the idea that the tools and the people who use them are equally important. You'll come for insightful, grounded advice on developer productivity and emerging technologies, but you'll stay for the genuine camaraderie and the occasional spirited debate about which whiskey bottle truly earns a spot on the shelf. It’s a refreshing blend of substance and personality, making complex topics accessible and reminding everyone that there's always a story behind the code.
Author: Language: English Episodes: 100

Whiskey Web and Whatnot
Podcast Episodes
We Accidentally Deleted Programming (Presented by CodeRabbit) [not-audio_url] [/not-audio_url]

Duration: 1:02:26
This week, Robbie and Adam sip on Whistle Pig's Liquid Death collaboration and debate whether we've accidentally deleted programming itself. They dig into the shift from code-first to spec-first development, whether Type…
Is AI Just Stealing with Extra Steps? (Presented by CodeRabbit) [not-audio_url] [/not-audio_url]

Duration: 1:05:10
This week, Robbie and Adam talk about the ethics and economics of AI, and why “stealing with extra steps” feels like the right metaphor for where things are headed. They dig into open source burnout, whether AI replaces…
Santa.exe (Presented by CodeRabbit) [not-audio_url] [/not-audio_url]

Duration: 1:03:33
This week, Robbie, Chuck, and Adam bring you the holiday edition of Whiskey Web and Whatnot: random whiskeys, Christmas hot takes, and dev debates. They discuss AI agents, guardrails, prompt-driven development, and wheth…
A Very Merry Descent Into Holiday Madness [not-audio_url] [/not-audio_url]

Duration: 1:01:57
This week, Robbie and Adam talk about holiday travel chaos, parenting stress, and health scares before diving into AI-assisted coding, Linux quirks, IDE trends, burnout in open source, and more. In this episode: - (00:00…
SOC 2 in the Streets, Spaghetti in the Sheets [not-audio_url] [/not-audio_url]

Duration: 59:45
This week, Robbie and Chuck sip Jack Daniel’s Single Barrel Rye, and discuss why SOC 2 compliance is a painful but necessary sign of company maturity. They also dig into AI coding tools, React fatigue, and the growing fr…
Spooky Scary CSS [not-audio_url] [/not-audio_url]

Duration: 1:03:27
This week, Robbie and Adam talk about Halloween vibes, excellent scotch, and the strange state of modern web development. After rating an Orphan Barrel single malt, they dig into AI coding workflows, agent tools, why one…
The Piano Man of State Machines w/ David K. Piano [not-audio_url] [/not-audio_url]

Duration: 1:00:17
This week, Robbie and Adam talk with David K. Piano about state machines, the chaos of overusing React hooks, Tailwind controversies, AI agents, security risks in emerging AI tooling, and why determinism still matters. T…
Are Developers Overthinking Everything? w/ Bdougie [not-audio_url] [/not-audio_url]

Duration: 54:40
Recorded live at All Things Open, Robbie and guest co-host Nick Taylor talk with Bdougie (Brian Douglas) about open source’s impact on their careers, the legacy of OpenSauced, and why developer tools succeed—or don’t. Th…