Vercel targets long-term API keys: labels them "insecure" by the end of the year, set to remove entirely next year.
52 minutes ago
Beating AI Express: Vercel announced it will phase out long-term static keys from its Marketplace. Starting November 30, third-party services that still rely on long-term keys and do not support Vercel OIDC authentication will be marked as "insecure". By January 2027, non-compliant providers will be delisted, with Vercel’s own APIs and native integrations required to follow the same standards. Long-term keys are non-expiring credentials, often stored in environment variables to enable apps or AI Agents to access services like databases. If leaked, attackers can exploit them indefinitely. Vercel’s OIDC, by contrast, allows programs to obtain short-lived credentials based on their own identity, with restricted access scopes and permissions. After credentials expire, the SDK automatically refreshes them, and caching reduces extra requests, eliminating the need for developers to manually rotate keys repeatedly. Vercel has faced such risks before: in April this year, third-party AI tool Context.ai was hacked, letting attackers breach Vercel’s internal systems and access some customers’ environment variables. The company only announced full remediation on October 16. Vercel also disclosed that past key rotation efforts consumed thousands of engineering hours. The company surveyed over 1,000 SaaS providers and found only 8.4% support the more secure authentication method. Long-term keys are widely used for their simplicity, while short-lived credentials are safer but more complex to configure and may increase network latency. Vercel is mitigating these costs via SDK and automatic caching, and using Marketplace listing eligibility to push providers to adopt more secure authentication practices.
Binance to distribute cash dividends to holders of tokenized securities of ASML and Nokia.
1 seconds ago
Bitcoin Core is adjusting its security policy, with some vulnerabilities to be patched and disclosed immediately.
1 seconds ago
Elon Musk donated over $445 million during this U.S. midterm election cycle, and injected an additional $77 million into America PAC in October.
1 seconds ago
Inside Story: OpenAI Fires 3 Security Researchers Amid Leak Investigation Involving External Audit Partner
1 seconds ago
Trade.xyz launches JIO Pre-IPO perpetual contract trading
1 seconds ago
Samsung’s Taylor 1 wafer fab has launched follow-up equipment investment, ramping up efforts to achieve 2-nanometer mass production.
1 seconds ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

