I think this is making at least *some* waves in google. I literally just got an ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

blinding-streak 3 months ago | parent | context | favorite | on: Google API keys weren't secrets, but then Gemini c...

I think this is making at least some waves in google. I literally just got an email from them with the subject "[Action Advised] Review Google Cloud credential security best practices"

A slew of recommendations, one of them being:

Disable Dormant Keys: Audit your active keys and decommission any that show no activity over the last 30 days.

(Although I don't think this even addresses the underlying issue)

andrekandre 3 months ago [–]

  > "[Action Advised] Review Google Cloud credential security best practices"

  > (Although I don't think this even addresses the underlying issue)

sounds like they want to have customers be responsible instead of fixing it themselves ...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact