I Found 39 Algolia Admin Keys Exposed Across Open Source Documentation Sites

So why hasn't the HomeAssistant docs page been nuked yet?

I have been developing an OpenClaw-like agent that automates exactly this type of attack.

Man, talk about unnecessary graphs... ok graph 2 is maybe tolerable, although it's showing the popularity of the projects, not a metric of how many errors/vulnerabilities found in those projects.

I'm not a newspaper editor, but I think if this was an article for one, they'd also say the graphs are unnecessary. It smells of "I need some visual stuff to make this text interesting"...

Interesting how many people already are playing with these API keys ? ;)

Great write up. Reminder that if you commit these to a Github Gist and the provider partners with GitHub for secrets scanning, they’ll rapidly be invalidated.

[dead]

[dead]