OpenCode has a security breach last that impacted 1.4% of console users

Posted by notmine1337 4 days ago

Comments

Comment by nl 4 days ago

> We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users

> We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked

Further:

> Third party keys saved in your workspace may have been exposed

https://x.com/WispyWinter/status/2111542806099722698/photo/1

Does anyone understand why they are calling this a distillation attack?

Comment by duhhhhh1212 4 days ago

> Does anyone understand why they are calling this a distillation attack?

They think their customers reading that post are idiots so it's easy to convince them of the distillation boogeyman instead of owning the breach.

Comment by vikramkr 4 days ago

The first sentence of the link is "We had a security breach." For distillation is just like saying it was a ransomware attack or similar - the attackers had a motivation. Are they supposed to not explain what happened? This is also one of the go to harnesses for using open source models with and a huge part of usership for them is that. Kind of the exact opposite incentives to Anthropic and co here.

Comment by smileybarry 3 days ago

The low percentage combined with "distillation attack" makes it sound like it was a few scattered requests across a bunch of attacks, and not the hundreds of dollars in third-party usage billed to random users. There's countless reports of OpenCode users impacted by this who woke up to $300-$1700 bills from Anthropic and OpenAI, but OpenCode didn't mention this or offer to compensate users. (Compensation can still come later of course but it's still worth noting right now)

Comment by searealist 3 days ago

> Does anyone understand why they are calling this a distillation attack?

I once had my credit card stolen and it was used to purchase gift cards.

Interestingly, no one referred to it as a “gift card attack”.

Between "distillation attack" and "under attack by agent swarms", it's probably to absolve themselves of responsibility by making it seem like an unavoidable arms race.

I wouldn't expect a post-mortem anytime soon.

Comment by verdverm 4 days ago

The vendor keys compromised in this, Ant/Oai, have been beating the "distillation attack" drum this year. They have provided no evidence, they need to provide an open dataset with queries and other data so that we can analyze and decide for ourselves. These companies are not trustworthy.

Comment by coldtea 2 days ago

Could it be because some hacker network hijacked OpenCode accounts, taking advantage of their OpenAI, Anthropic, API credentials, for distillation?

Comment by 3 days ago

Comment by Macha 4 days ago

I guess that was what they believe the attacker intended to use the stolen keys for?

Comment by verdverm 3 days ago

Narrative shaping is probably more accurate than guess or understand. Do note that the other Ai vendors involved have been chanting the distillation song for a while.

Comment by cdurth 3 days ago

So a breach occurs and they recommend people rotate keys? But they claim fraud and break everyone's access with existing keys?

Why anyone uses their services, or even the harness product at this point is beyond me. They just shill cheap and crappy models for training and make boneheaded decisions and "mistakes".

Comment by verdverm 3 days ago

What other open source harnesses are there which have a good, albeit opinionated, experience out-of-the-box?

The $10/40 monthly subscriptions are a great deal. Don't proxy your subs through any one vendor, own your keys, because this is just one of many such events.

Comment by radeeyate 3 days ago

I'm a big fan of Crush: https://github.com/charmbracelet/crush

It's all BYOK but the also have Hyper (https://hyper.charm.land/) which is their hosted inference of OSS models.

Comment by verdverm 3 days ago

crush has outdated docs and abstract credit based pricing, both big red flags for me

Comment by nevernothing 3 days ago

I recently switched to ccgui, so far I like it

Comment by verdverm 3 days ago

It seems I should have noted that my questions was rhetorical, I'm not personally looking for a new harness right now.

Comment by mickeyp 3 days ago

Plug: Try dreamcoder.ai. It's not foss but it is opinionated.

Very different experience from all the other harnesses.

Comment by verdverm 3 days ago

Big nope, I want a terminal application, and only of the open source variety.

I have my own too, needs a refresh since it was written before I made the rounds with all the popular harnesses.

Comment by unrented7977 3 days ago

Oh-my-pi

Comment by verdverm 3 days ago

Too heavy handed and opinionated, not interested in the "agent team" setup found therein. I have a set of plugins I prefer, building blocks assembled to create my own take, with some custom ones on the horizon.

I'm generally disappointed with the Pi team and their dismissal of a major security gap

https://github.com/earendil-works/pi/issues/10895

Comment by 3 days ago

Comment by qsod 3 days ago

[dead]

Comment by coldtea 2 days ago

>So a breach occurs and they recommend people rotate keys? But they claim fraud and break everyone's access with existing keys?

That's what you do when you have a breach. What exactly did you expected? Keys continue to work and everybody gets a box of chocolates too?

Comment by sixothree 2 days ago

I'm pretty sure their timeline of the breach is also not correct. I think information about my account was exposed over a month ago.

Comment by geye1234 3 days ago

I use Pi, but I think its updates and its extensions' updates are the biggest security gap I have right now. I'm not even sure what they keep updating TBH.

Any recommendations?

Comment by kadoban 3 days ago

Put it in a container with a build step and lock down versions. That's what I did. Then you can choose what to update, audit code, etc.

Whatever agent will be more than capable of wiring that up.

Comment by anygivnthursday 4 days ago

Also discussed earlier here: https://news.ycombinator.com/item?id=50133401

Comment by verdverm 4 days ago

With almost 900 upvotes

Comment by WalterGR 3 days ago

It’s the most-upvoted submission of the last 24 hours, according to https://hn.algolia.com/?dateRange=last24h&sort=byPopularity&...

Comment by verdverm 3 days ago

yup, lots of people are sus about how fast it fell from the front page given the metrics, OpenCode is a YC company