Spyke
Daniel Quinn
lemmy.ca

You created a Maps key three years ago and embedded it in your website's source code, exactly as Google instructed. Last month, a developer on your team enabled the Gemini API for an internal prototype. Your public Maps key is now a Gemini credential. Anyone who scrapes it can access your uploaded files, cached content, and rack up your AI bill. Nobody told you.

Yikes.

35
emeraldreply
lemmy.blahaj.zone

I know you shouldn't assume malice over stupidity but I can't see how turning a project ID into an API credential could be anything but malicious and an intentional way to extract fees from people that aren't paying attention

24

You reached the end

Dev stunned by $82K Gemini API key bill after theft | Spyke