We provided Google with concrete examples from their own infrastructure to demonstrate the issue. One of the keys we tested was embedded in the page source of a Google product's public-facing website. By checking the Internet Archive, we confirmed this key had been publicly deployed since at least February 2023, well before the Gemini API existed. There was no client-side logic on the page attempting to access any Gen AI endpoints. It was used solely as a public project identifier, which is standard for Google services.
Res Obscura is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber.
。关于这个话题，51吃瓜提供了深入分析
email = "[email protected]",
“한국은 ‘얼죽아’의 본고장”… 스타벅스, 韓서 세계 최초 ‘에어로카노’ 출시