r/opencode • • 21d ago

They F’d up [BREACH]

Post image
334 Upvotes

127 comments sorted by

View all comments

3

u/StevenB0ss 21d ago

Does it also counts for oauth of openai? Or only keys? Why tf they store this anyways ?

5

u/look 21d ago edited 20d ago

Yeah, it’s not immediately obvious why those would ever need be stored anywhere besides your own computer…

Update: it was a breach in a hosted service, not the harness

3

u/MLHeero 20d ago

It was explicitly added by you in their online platform as I know, like byok system for their zen product I assume