GitLab scan finds 17,000 secrets in public repos, leading to $9000+ in bounties(trufflesecurity.com)

12 points by adrianwaj 11 months ago | 4 comments

I scanned all of GitHub's "oops commits" for leaked secrets(trufflesecurity.com)

164 points by elza_1111 1 year ago | 87 comments

Anyone can access deleted and private repository data on GitHub(trufflesecurity.com)

1823 points by __0x1__ 2 years ago | 341 comments

Truffle Security blog post explaining how data from deleted forks, deleted repositories, and private repositories on GitHub can remain accessible to anyone.

I found a backdoor into my bed(trufflesecurity.com)

855 points by riverdroid 1 year ago | 345 comments

Truffle Security blog post describing a backdoor found in the Eight Sleep smart bed that allowed remote access, and how the authors removed it.

Scanning 7.6 Petabytes of HuggingFace Training Data for Secrets(trufflesecurity.com)

31 points by 882542F3884314B 2 months ago | 8 comments

How to Scan Force Pushed Commits for Secrets(trufflesecurity.com)

11 points by mmcclure 1 year ago | 1 comments

Getting a Gemini API key is an exercise in frustration(ankursethi.com)

785 points by speckx 10 months ago | 307 comments

A blog post by Ankur Sethi describing the frustrating process of obtaining a Google Gemini API key to try Gemini 3 Pro for a React side project.

Gemini CLI will stop working from June 18, 2026(developers.googleblog.com)

358 points by primaprashant 5 months ago | 189 comments

Google for Developers blog post announcing the transition of Gemini CLI to Antigravity CLI, with Gemini CLI ceasing to work from June 18, 2026.

Gemini CLI tips and tricks for agentic coding(github.com)

378 points by ayoisaiah 11 months ago | 130 comments

GitHub repository by Addy Osmani with a guide of about 30 pro tips for using Google's Gemini CLI for agentic coding.

Google’s OAuth login doesn’t protect against purchasing a failed startup domain(trufflesecurity.com)

466 points by simiones 1 year ago | 255 comments

Truffle Security blog post describing how buying expired domains of failed startups lets attackers log into former employees' accounts via Google OAuth.

Gemini 2.0 is now available to everyone(blog.google)

546 points by meetpateltech 1 year ago | 236 comments

Google Keyword blog post by Koray Kavukcuoglu announcing Gemini 2.0 models becoming generally available to everyone, dated February 5, 2025.

Three Years from GPT-3 to Gemini 3(oneusefulthing.org)

338 points by JumpCrisscross 11 months ago | 270 comments

Ethan Mollick's One Useful Thing Substack post reviewing Google's Gemini 3 and reflecting on AI progress in the three years since GPT-3 and ChatGPT.