“Researchers from Aikido found that deleted Google API keys…” — CyberWire Daily at 8:12
“Researchers from Aikido found that deleted Google API keys can continue authenticating requests for up to 23 minutes after deletion because revocation propagates gradually across Google's infrastructure. In testing across 10 trials, deleted keys remained intermittently functional for between 8 and 23 minutes…”
0:00
25:41