Google API keys keep working after you delete them
Summary
Aikido Security analyzes Google's API key revocation window, showing that deleted keys may still authenticate for up to ~23 minutes due to eventual consistency. The piece documents measurements across trials, regional differences, and recommended mitigations for incident response.