How Google Turned Every Maps Key Into a Financial Weapon
A developer woke up to a €54,000 bill. Not from a data breach, not from a compromised server, but from an old Firebase browser key — the kind Google spent a decade telling developers wasn't a secret — suddenly being used to hammer Gemini API endpoints for 13 hours straight. Budget alerts were set at €80. They arrived hours late, by which time €28,000 had already been charged. Google Cloud Support denied the billing adjustment. The traffic came from valid project credentials, they said. Case closed.