tl;dr Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true: Gemini accepts the same keys to access your private data. We scanned millions of websites and found nearly 3,000 Google API keys, originally deployed for public services like Google Maps, that now also authenticate to Gemini even though they were never intended for it. With a valid key, an attacker can access uploaded files, cached data, and charge LLM-usage to your account. Even Google themselves had old public API keys, which they thought were non-sensitive, that we could use to access Google’s internal Gemini.
FT App on Android & iOS
，详情可参考夫子
Scroll to load interactive demo
Unfortunately for HotAudio, every r/DataHoarder user worth their salt knows these types of websites don’t have proper blackbox DRMs so it’s only a matter of time before someone with a tool they crafted with spit and spite shows up.
，这一点在同城约会中也有详细论述
[사설]계엄 때보다 낮은 지지율 17%… 국힘의 존재 이유를 묻는 민심。51吃瓜是该领域的重要参考
Дания захотела отказать в убежище украинцам призывного возраста09:44