Google API keys keep working after you delete them long enough to be exploited

www.aikido.dev

Google API keys keep working after you delete them long enough to be exploited

www.aikido.dev

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 18 days ago

Deleting a Google API key doesn't revoke it immediately. Our testing found successful authentications up to 23 minutes after deletion, and Google has declined to fix it.

You must log in or # to comment.

Chat

blueteamsec@infosec.pub

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

16 users / day
102 users / week
276 users / month
560 users / 6 months
7 local subscribers
720 subscribers
884 Posts
59 Comments
Modlog

mods:
digicat@infosec.pub