Mastodawn

#Google #API Keys Remain Active After Deletion

#Aikido #Security found that deleted #GoogleAPI keys can continue #authenticating for a median of about 16 minutes and as long as 23 minutes, despite Google Cloud's UI claiming that once a key is deleted it can no longer make API requests.

https://tech.slashdot.org/story/26/05/22/1827258/google-api-keys-remain-active-after-deletion?utm_source=rss1.0mainlinkanon&utm_medium=feed

Google API Keys Remain Active After Deletion - Slashdot

Aikido Security found that deleted Google API keys can continue authenticating for a median of about 16 minutes and as long as 23 minutes, despite Google Cloud's UI claiming that once a key is deleted it can no longer make API requests. Dark Reading reports: Joe Leon, researcher at Belgian startup ...

Show thread

Annual Computer Security Applications Conference Apr 25, 2024

The first paper in the session was Ochoa et al.'s "SealClub: Computer-aided Paper Document Authentication", which proposes a novel approach to #authenticating paper #documents by taking short videos of them with #smartphones. (https://www.acsac.org/2023/program/final/s54.html) 2/5