Hacker News Reader

How were they able to generate / obtain the `apiKey` shown in the technical details in part 6?

Without looking closer I just assumed it was trivially extracted from the frontend.

You're right, it's the Supabase's anonymous API key they send with each anonymous request.