"Hi, I am seeing ‘Project quota tier unavailable’ in AI Studio for my project gen-lang-client-08838227... When checking Google Cloud Console, it shows the project is suspended for ‘abusive activity consistent with hijacking.’ I believe this may be an error or a result of a leaked key. How can I get the quota tier restored?
I am unable to get past the “Request an Appeal” page to setup another project - it always returns to the same page ( https://console.cloud.google.com/appeal?project=gen-lang-client-0883822...&chat=true )
What am I missing here? Any help would be appreciated.
Thanks,
Larry
DM’ed you for more details
Thank-you for responding - I appreciate it.
An interesting week for sure, but I resolved this problem. There were a number of problems to be fixed relative to API keys. The final/last issue fixed (deploying app from AI Studio (dev) to GCP (production) related to proper key rotation in production versus dev.
I am happy to say that I have successfully migrated the full stack from the old project to the new project (Sparkwavv-prod) and the live domain: sparkwavv.ai
I am looking for some guidance on further development of the agentic capabilities, and. weary ( and wary) of 10 minute YouTube videos promising Valhalla for $150, so if you could point me in the right direction on that topic, you’ve made a friend for life. I have an MVP delivery in August and any superior knowledge/expertise and guidance is appreciated
Take care,
Larry
Larry - I spend too much time trying to learn what GAIS does and its limitations and security issues that exist (probably so users have a good experience). There are a bunch of small behind the scenes things GAIS does to make it work and some interesting security decisions like service workers injected to ensure your gemini keys are not public domain but if you ever published the site via git rather than GAIS publish, you will likely miss the “magic” GAIS does and get caught. Also, database is not one of the capabilities they have implemented well. In your app, your database can be scraped with a simple:
curl “Modified by moderator” I just pulled 10 users and emails.
you will need to have it update the firebase security rules at minimum. In a perfect world, you should move to a backend API.
Even if you try to convert this to a next.js with /api, GAIS struggles and sets everything to “use client”
cheers and good luck.
Jim - thanks for your investigative work - I appreciate your time and effort.
I think I’ve corrected the issue you found …
I’ve been going back/forth with AI Studio - really a newbie on AI Studio and Google in general (after a long software career in the stone ages (card decks, assembly language, RTOS and HWIL), my third “reinvention” has begun
I’ve tweaked Gemini skills again … we’ll see.
Thanks again for your insights.
Larry