Google API keys keep working after you delete them long enough to be exploited

www.aikido.dev

Google API keys keep working after you delete them long enough to be exploited

www.aikido.dev

RSS Bot@lemmy.bestiver.seMB to Lobste.rs@lemmy.bestiver.seEnglish · 2 hours ago

Deleting a Google API key doesn't revoke it immediately. Our testing found successful authentications up to 23 minutes after deletion, and Google has declined to fix it.

Comments

You must log in or # to comment.

Chat

Lobste.rs@lemmy.bestiver.se

lobsters@lemmy.bestiver.se

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !lobsters@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

RSS Feed of lobste.rs

Source of the RSS Bot

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

37 users / day
139 users / week
241 users / month
242 users / 6 months
1 local subscriber
376 subscribers
380 Posts
25 Comments
Modlog