因思念巴西，他決定回國。如今，他在本地為一名被稱為「汽車旅館女王」的女企業家擔任私人顧問。
tl;dr Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true: Gemini accepts the same keys to access your private data. We scanned millions of websites and found nearly 3,000 Google API keys, originally deployed for public services like Google Maps, that now also authenticate to Gemini even though they were never intended for it. With a valid key, an attacker can access uploaded files, cached data, and charge LLM-usage to your account. Even Google themselves had old public API keys, which they thought were non-sensitive, that we could use to access Google’s internal Gemini.
。PDF资料对此有专业解读
一边是大家都知道 Agent 很强、OpenClaw 很火；另一边，是复杂的部署流程、看不懂的 API 配置，以及随时可能失控的调用成本。很多人不是不想用，而是很难真正用起来。
// console.log(nextGreaterElements([1])); // [-1]（单元素）