Close Menu
    Technik

    Ein gestohlener Gemini-API-Schlüssel verwandelte innerhalb von zwei Tagen einen 180-Dollar-Schein in 82.000 Dollar

    Share.
    View 8 Comments

    8 Kommentare

    1. gdelacalle on

      I actually didn’t know if tag it as Artificial Intelligence or Security, so I had to choose the lesser of weevils.

    3. Syrairc on

      Does Google not offer an ability to set monthly budget caps?

      I’ve never used Google’s service but I use Azure and one of the first things I do is set a budget on every resource group I create.

      I sympathize with the developers and Google can certainly afford to cut them a break, but you should definitely never give any usage-based service a blank check to bill you.

    4. blacknwhitecookie on

      ”The developers said they did not believe they made any „obvious“ operational mistake.” Yet they didn’t have two factor authentication activated. Might not be the reson this happened but c’mon. It’s standard practice for at least a decade.

    5. SimRacingSensations on

      This is exactly why I always set budget caps on cloud services even for development keys. I once had an AWS key leak from a public repo and woke up to 00 in charges before I noticed. Now I have alerts set for any spending over 0/day and budgets on every service. Its extra work but these stories prove its worth it. Also, 2FA should be mandatory for API access by now.

    6. snesericreturns on

      Always tie it to a privacy card with a hard spend limit. Then this won’t happen.

    8. Difficult-Way-9563 on

      So basically the future is people selling and buying stolen AI API keys?

    Leave A Reply