OpenCode Hacked: User credentials leaked (twitter.com)

Article summary

OpenCode announced a security breach affecting 1.4% of OpenCode Console users, resulting from a large-scale distillation attack. The company notified affected users via email and is working with Anthropic, OpenAI, and Google to remediate the issue. User credentials, including third-party provider keys, may have been exposed. The incident is ongoing, and OpenCode has not shared further details.

Main themes

• security breach
• distillation attack
• credential exposure
• cloud security
• transparency

What commenters say

• The breach may have been preventable if OpenCode had addressed earlier warnings and concerns about their security practices.
• Some users are concerned about the potential consequences of the breach, including the use of exposed credentials for malicious purposes.
• The incident highlights the need for greater transparency and accountability from companies like OpenCode when it comes to security incidents.
• There are differing opinions on whether the breach is a significant issue, with some users downplaying its impact and others expressing concern about the potential risks.
• Some users are questioning the effectiveness of OpenCode's response to the breach, including their decision not to provide more detailed information about the incident.
• There are concerns about the potential for automated flagging and downvoting of comments that criticize OpenCode or raise concerns about their security practices.
• The breach may have implications for users who have used OpenCode's hosted services, including the potential for exposed credentials to be used for malicious purposes.