Google API keys weren't secrets, but then Gemini changed the rules(trufflesecurity.com)
1206 points by hiisthisthingon | 288 comments
Truffle Security blog post explaining that public Google API keys, long deemed non-secret, can now access Gemini and private data, based on scans of exposed keys.



























































