Story
€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs
1 report
1 website
1 discussion
Latest report
Overview
A €54,000+ charge occurred within 13 hours after enabling Firebase AI Logic on a Firebase project. The spike in billing was attributed to the use of a Firebase browser key without API restrictions for Gemini requests.
Summary from discuss.ai.google.dev.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · discuss.ai.google.dev
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Read this discussion’s reaction
Based on 5 sampled comments from this thread. Analyzed 2026-04-16.
- Praise: The discussion highlights a critical gap in user experience with Google Cloud, emphasizing the need for better billing alert systems to prevent financial disasters.
- Praise: The community's awareness of API key security is growing, indicating a shift towards better practices in managing sensitive information.
- Concern: The delayed billing alerts on Google Cloud can lead to catastrophic financial consequences, demonstrating a significant flaw in their service design.
- Concern: Users express frustration over the lack of a hard spending cap, which could protect against runaway costs, revealing a major oversight in user safety features.
- Concern: There is a perception that Google’s billing system is designed to benefit the company at the expense of users, labeling it as an 'antifeature' that traps users into unexpected charges.