148
A stolen Gemini API key turned a $180 bill into $82,000 in two days (www.techspot.com)
submitted 8 months ago by to c/technology@lemmy.world
15 comments fedilink hide all child comments
 

Original Reddit post, which the article almost exclusively pulls from: https://old.reddit.com/r/googlecloud/comments/1reqtvi/82000_in_48_hours_from_stolen_gemini_api_key_my/

you are viewing a single comment's thread
view the rest of the comments
[–] 57 points 8 months ago (1 child)

One of the developers argued on Reddit that cloud providers should implement stronger safeguards

Uh, stronger safeguards like LIKE ENABLING TWO FACTOR AUTHENTICATION YOU FUCKING IDIOTS.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 4 points 8 months ago

    I wasnt aware of 2FA on API keys.

    Is that something new?
    And here I thought that's why they tell you to never share it because the API key can't be protected by 2FA (And no, IAM or SSO is not something I will count)

  • permalink
  • fedilink
  • source
  • parent