Harry Sintonen @harrysintonen@infosec.exchange
Public

Retroactively changing the role of a token or key is a very bad idea.

trufflesecurity.com/blog/googl

Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co.

Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true.

trufflesecurity.com

0
0
1

If you have a fediverse account, you can quote this note from your own instance. Search https://infosec.exchange/users/harrysintonen/statuses/116136789969194649 on your instance and quote it. (Note that quoting is not supported in Mastodon.)

0
0
0