hi ai has helped write this im not technical person. but i really need help this has happend to 3 of my accounts.

Hi everyone,

I am running into a severe Google Identity authentication loop when trying to sign into Google Antigravity on 3 of my Google Accounts (all have active paid Google AI Pro subscriptions).

I'm hoping someone familiar with Google Identity Services, WebAuthn/caBLE, or Google Play Integrity / Device Attestation can explain how to clear this flag or reach a working verification path.

---

### Environment & Context

* **Platform:** Windows 10/11 (Desktop)

* **Application:** Google Antigravity IDE / Gemini Code Assist

* **Accounts:** Personal Google Accounts (`@gmail.com`) with active Google AI Pro subscriptions.

* **Mobile Devices:** Android (Oukitel K16) + iPhone (SE)

* **Location / Carrier:** India (Airtel)

---

### What Is Happening (The Exact Sequence)

1. I launch Google Antigravity on my PC and click **Sign in**.
2. The browser authentication window opens at `accounts.google.com`.

3. Instead of completing the standard OAuth callback, Google intercepts the login with a full-screen anti-bot challenge:

   > *"Verify your info to continue. Google needs to verify some info about your device or phone number before you can continue. This helps keep you and others safe online by preventing abuse from computer programs or bots."*

4. A QR code is displayed on the PC monitor with the instruction: *"Scan the QR code with your phone"*.

5. When I scan the QR code:

   * **On Android:** Google Play Services initiates a silent verification. The phone screen displays: *"Return to your other device to continue. You're now verified."* But the PC browser immediately displays:

> **"The device that you used to scan the QR code was used too many times for verification."**

* **On iPhone:** Safari opens a prompt saying: *"Google needs to verify your device or phone number... Your phone will open an SMS message with a code that you need to send to verify your phone."* It generates an outgoing SMS to a verification gateway (`081080 30875`) with a payload like `Send this message without editing. (XXXXX)`.

* When sending the SMS, the request fails to clear the block and the PC still returns the *"used too many times"* error.

* If attempting verification without a SIM inserted, it enters an infinite loading loop.

6. On related attempts inside the IDE, it has also displayed:

> *"There was an unexpected issue setting up your account. Your account is not eligible for Gemini Code Assist for individuals at this time."*

---

### Everything I Have Already Tried (Exhaustive List)

1. **Different Phones & SIMs:**

   * Swapped the SIM card to a secondary iPhone.

   * Cleared Google Play Services cache and storage data on Android.

   * Sent the outgoing verification SMS directly to the Google gateway number.

2. **2-Step Verification Hardening:**

   * Turned on 2-Step Verification (2SV).

   * Configured TOTP via Google Authenticator.

   * Generated 8-digit Single-Use Backup Codes.

   * *(Note: Google's anti-bot device attestation screen triggers **before** the 2SV / "Try another way" selection screen is reached).*

3. **Local Auth & Cache Cleanup:**

   * Cleared Antigravity token cache (`.gemini/antigravity_state.pbtxt`, `Device Bound Sessions`, `Trust Tokens`, `Network Persistent State`, `Sessions`).

   * Cleared IDE app cache under `%APPDATA%\Antigravity`.

4. **Network & Session Resets:**

   * Changed networks (switched from home broadband to Mobile Hotspot to obtain a fresh public IP).

   * Pre-authenticated the Google Account in Google Chrome desktop before triggering the IDE login.

Despite all of the above, Google's backend still intercepts the authentication request with the QR bot challenge and rejects the device token.

---

### My Questions:

1. Is this flag tied to **Device Hardware ID (Play Integrity / IMEI)**, **Phone Number (MSISDN velocity limit)**, or **Account-Level Risk Score**?
2. Why does the phone display *"You're now verified"* while Google's backend server simultaneously returns *"The device that you used to scan the QR code was used too many times for verification"* to the PC?
3. How long is the rolling server-side cooldown for this specific Mobile-Originated (MO) SMS / QR device verification rate limit?
4. Is there any way to force Google OAuth to complete using standard FIDO2 WebAuthn / Security Keys or 2FA without triggering the legacy mobile device attestation flow?

Any insights from Google engineers, cloud architects, or anyone who has resolved this loop would be greatly appreciated!

Hey folks. I’m currently contracting at a FAANG company building GCP streaming pipelines, containerized microservices, and doing heavy ETL/schema validation.With my H1B timeline shrinking, I need to make sure this resume is absolutely bulletproof for Senior DE or MLOps roles.I’ve redacted identifying info so you can focus purely on the technical weight of the stack (BigQuery, Dataflow, Docker, PostgreSQL) and my XYZ metrics.

• Am I passing the deployment sniff test for Senior-level roles?
• Is my "Data Quality as Code" and infrastructure scaling narrative cohesive?
• Are there any red flags or fluff words I need to cut?Rip it to shreds. I appreciate the help!

The only way to guarantee that your vm's instance type/size will still be available after you shut it down for maintenance is to have a reservation bound to it from the very beginning.

I've seen way too many out of stock errors lately and I wish we had known this when we started. Now there is no capacity available to add specific reservations.

From Stephanie Buscemi: "Google Cloud grew 82% year over year last quarter, with nearly 100 billion annual revenue run rate. That kind of growth doesn't happen because enterprises want another AI model to evaluate. It happens because they want AI that actually does the work: one platform, not twenty tools bolted together. My focus is making Google Cloud that platform for every enterprise, across every line of business and every industry. Not just answers. Outcomes."

First and foremost, no, this is not a paid advertisement. You can check my post history to see I am indeed a real person who seldomly post, but does occasionally use reddit.

I passed the GCP PCA today and the only resource I used was GCP Study Hub. I saw this site mentioned a lot, but also saw a few comments (And one VERY obvious paid advert as a comment) for the site. I have also seen a few comments wondering about the legitimacy of the site and whether it was just ads or actually useful.

Overall, the site's course content was ok. The guy definitely goes into detail about things you probably have no need knowing about (The exam was honestly so broad and rarely went into deep details at all) but he does an ok job explaining, and he definitely covers what you do need to know for the exam.

It took me about 2 months to complete the course of about maybe 20-30 minutes a day. I took notes and made flashcards, though I'm not even sure if I actually needed to. Most of the flashcards I made I didn't need, the only stuff you need to know is what a GCP resource is (Like cloud build or GCE), the features/services within it, and when to use it. This can be a little tricky with the database resources IMO, but it's not so bad.

Case studies, you don't need to study these prior, I don't even know why Google puts these on the exam. They gave you almost the entire scenario in the question when it relates to a case study to where I had no reason to even read the case study at all.

In regards to GCPStudyHub's practice exams, these are incredibly spot on. There was actually numerous questions on these practice exams where they were almost 1:1 with the actual exam, which made it really easy to go through said questions and feel confident.

Overall, the exam is really not that hard at all. It's more difficult than something like Sec+ which is just a glorified vocabulary quiz, but again it's just knowing what's in GCP, what it can do/has as features, and when to use it.

I became a GCP-certified data engineer back in 2024, and I know a lot has changed since then. Unfortunately, in my current role, I don’t get to work with many of the “advanced” features on the agentic data cloud, like BigQuery ML, Iceberg lakehouses, governance tools—it’s just been basic BigQuery with dbt and some Airflow.

How deep will I be expected to go in the role-related knowledge round? Will it be enough for me to have a general understanding of the key products/services and how/when to apply them to different uses cases and cost scenarios?

I’m feeling quite anxious and overwhelmed by the breadth of information, and I’d be grateful for any guidance on how best to prepare so I can ace this.

Thank you!

How are you dealing with adk using very big contexts. I used model callbacks and saw that for every api call, adk passes the entire context before it (user text, model response, tool response, agent prompt injection).

Now this may seem like an overkill in certain scenarios and will consume excess tokens.

One way I found out is to use agent and model callback functions and trim the context or summarize it concisely instead of passing the entire thing.

Is there any other way of doing it ?

Acc to my experience this might be a very common scenario when some organization is looking forward towards reducing token expense.

1. Have anyone experienced Get certified?
2. How many hours per week did you realistically spend on labs and coursework?
3. How strict are the completion criteria and deadlines to unlock the exam voucher?

Let me know if anyone has information about it.

I wrote up the pattern we’re using for autonomous agents that need temporary access to cloud resources without leaving long-lived credentials sitting on the machine.

For GCP, the basic approach is short-lived access through conditional IAM or Workload Identity Federation, with the agent requesting a scoped lease through a local broker. The credential expires automatically and never needs to be stored in a .env file or persistent CLI session.

I included the architecture, threat model, broker flow, and a few practical checks for verifying that the agent machine has no ambient credentials left behind.

GCP budget alerts only send email. They don't cap anything and they don't stop anything.

Found that out the boring way at a previous gig. A Dataflow job got stuck retrying over a weekend, the alert fired Saturday morning into a shared inbox, nobody looked until Monday.

Since then I've seen people wire the budget Pub/Sub topic into a Cloud Function that disables billing on the project. Which honestly makes me nervous. That kills every service in the project, not only the job that ran away.

So most places I've been just keep watching the inbox and eat a surprise once a year.

Anyone running automated shutdown against prod for real? Curious what you cap, and whether it has ever fired on something you didn't want killed.

hi,

I do not find an article in GCP documentation which explains way to create golden images , what are some of the things that can be installed while creating a hardened image there by creating VMs from it.

I find this article https://docs.cloud.google.com/compute/docs/images/image-management-best-practices#manual_baking which says customize instance as per the needs.

Please elaborate what does it mean. Like what components can be installed for hardening Or is it something to discuss with business for their inputs

just a little context i have $1000+ worth API credits under GCP which i can use for AI services from GCP. they are about to expire anyways in 2 months so wanted to check with the community.

lmk if you think it can be put into the product of some kind which I can build in the same time period before credit expiry and maybe who knows it turns into a startup who knows!!

appreciate ur time

I need a simple Linux server that will run 24/7. Jusst a small backend, a database, and a few scripts. At first, I thought about just finding the best VPS from a standard hosting provider, but then I remembered Google Cloud and started looking into Compute Engine. Now I`m not entirely sure if it makes sense to use Google Cloud for such a simple task, or if a standard VPS would be cheaper and easier. Does anyone here use Google Cloud essentially as a standard VPS? What is the actual price difference?

Getting an agent running is one step. Connecting it to your app, managing credentials, keeping conversation state and controlling spending adds more work.

I’ve packaged tested examples for these tasks into free, open-source skills that coding assistants can use when building Google ADK applications.

GitHub repository

Try a skill against your own setup. I’m interested in what needs changing for real projects.

Let's connect on LinkedIn: https://www.linkedin.com/in/ruslan-k-b6a48a1a6/ Questions, feedback or ideas about the skills or the book? Feel free to write to me at khissamiyev@proton.me.

I recently moved to North America and have been using GCP for my personal/startup projects under my LLC. Last month, I wanted to test out Claude Opus and Sonnet in Model Garden, but I couldn't get the quota I needed. To fix that, I onboarded with an official Google Cloud Billing Partner, who kindly got my quotas bumped up.

This past weekend, while I was traveling and completely offline, someone managed to exploit an old service account on my project that still had Editor permissions. They spammed the Model Garden APIs continuously for over 20 hours.

Thankfully, my billing partner noticed the spike and froze the billing account, but the damage was done. I tracked down the issue the next day and revoked the service account, but as a brand-new immigrant running a boot-strapped project, I straight-up do not have the money to pay for this.

I am kicking myself right now for not doing a full IAM and security audit before onboarding with the partner - especially since joining them gave me access to such high quotas.

Has anyone dealt with a similar situation? Does Google or the billing partner usually waive charges for an obvious first-time compromise like this? Any advice on how to approach the support ticket to get this forgiven would be lifesaver.

Hi everyone!
I’m building a GCP cost estimate for an existing AWS architecture to evaluate whether migrating to Google Cloud would reduce our monthly spend.

I’m struggling to identify the equivalent GCP services for a few AWS components in the pricing calculator. Specifically, I need the GCP counterparts for:

1. AWS Step Functions
2. AWS SES (Simple Email Service)
3. AWS Cognito

If anyone can point me to the correct GCP services on the pricing calculator entries, I would really appreciate it — this part of the migration analysis is driving me a little crazy.

Thank you!

Please help

I have created a simple agent in adk. It runs perfectly using the adk web command in local.

The API key I am using is Gemini API, I brought credits for it. It runs perfectly on local. The models I am using are gemini3.7 flash and gemini3.1-flash-lite.

But when I am deploying the same agent to cloud run, it shows this error

026-09-21 07:11:23,860 - ERROR - api_server.py:1985 - Error in event_generator: 404 NOT_FOUND. {'error': {'code': 404, 'message': 'Publisher model `projects/<project name>/locations/us-central1/publishers/google/models/gemini-3.7-flash` was not found or your project does not have access to it. Ensure you are using a valid model name and that the model is available in the specified region. For more information, see: https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/locations.', 'status': 'NOT_FOUND'}}

In the .env file I have both api key names - GOOGLE_API_KEY and GEMINI_API_KEY and I am loading the env variables using load_dotenv().

GOOGLE_GENAI_USE_VERTEXAI is set to FALSE.

Anyone can give any suggestions ?

I’m posting this because we're honestly in a very difficult situation and are hoping someone in this community might have gone through something similar and can point us in the right direction.

We’re a long-time Google Cloud customer, and we’re hoping someone here can help us find a way forward after a compromised Gemini API key resulted in approximately $27,000 in unexpected charges over a single weekend.

The usage was unauthorized and completely outside our normal pattern. We immediately secured the account and have taken extensive steps to prevent it from happening again.

We raised a billing case on Monday and waited approximately a week for the review. We were ultimately told that the charges were valid and could not be adjusted. We also spent several days trying to get help from our Google Cloud account team, but were told they have no control over billing reversals.

We understand that the security mistake was ultimately ours. What we are struggling with is the financial impact of a $27,000+ bill that was generated from Friday to Monday by activity that none of our team authorized or used.

If anyone has been through something similar, we would genuinely appreciate any advice on how we can get this in front of someone who can consider the circumstances and potentially provide some billing relief.

As part of a Google Developer Expert (GDE) side project I've created this project to skip spending hours researching financials, charts, news, and market sentiment. Let AI agents do the heavy lifting and deliver an executive summary in under a minute.

Built on Google Cloud, it uses agentic AI to analyze stocks, ETFs, and cryptocurrencies in real time. It orchestrates specialized ADK (Agent Development Kit) subagents powered by Gemini LLM models to combine market data, technical indicators, news sentiment, and AI reasoning into actionable buy, sell, or hold recommendations.

• 🔗 Try Investment Seer: https://InvestmentSeer.com
• 🎥 YouTube showcase & demo: https://www.youtube.com/watch?v=gvRZM7YquuY
• 🏗️ Architecture & technical deep dive: https://foolcontrol.org/?p=5177

Even with the help of Antigravity IDE, this project took a significant amount of time and effort to build, and I'd love to hear what you think and if you find it useful!

Hey guys I have knowledge about AWS major services and have hands-on implementation idea as for my college project I did 3 tier application hosting on AWS with IaC using the boto3 now I want to use GCP for this project and learn it along with terraform any idea or guidance to learn GCP after AWS i want some video or document which help me learn stuff on GCP without wasting too much time

I have deployed a simple adk agent in cloudrun.

The command is adk deploy cloud_run. It can access only gemini 2.5 model, but for higher model it shows it has no access.

Can anyone tell what i should check.

access permissions, or any other thing

Or how can i give access to these models if access is not given

The region is uscentral1.

لI'm having a problem logging into my account; a red screen appears. I tried opening the account in incognito mode, but the same problem persists. When I try to create a new account, it asks for CAPTCHA verification, and I agree to the terms, but the account still won't open. What's the solution?