Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co. (opens in new tab)

Covered by 3 sources including Aikido Security's Blog, DEV CommunityDiscussed on Hacker News, Lobsters, and r/programming

Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

Aikido Security's Blog·

Google API will keys keep working after you delete them

Discussed on Hacker News and Lobsters

DEV Community·

Blast Radius of an AI Agent's API Key: Score It in 40 Lines

Discussed on DEV

theregister·

Threat hunters find Google API keys still usable 23 minutes after deletion

Discussed on Hacker News