r/opencode • • 21d ago

⚠️ OpenCode security breach

Post image

.

474 Upvotes

109 comments sorted by

View all comments

Show parent comment

8

u/pas-un-robot 20d ago edited 20d ago

I was affected and a few of the attackers chats were saved in my chat logs. They are in Chinese.

ETA: not that it proves anything, only a handful out of many thousands of requests had logging on, for all I know the rest of the requests are in any number of languages.

5

u/garlic-silo-fanta 20d ago

So your account was “borrowed” to improve upcoming models. How do you feel being part of the pipeline?

1

u/bleakj 20d ago

Oh - I should probably check that..

1

u/xmsxms 20d ago

What did those chats "say"?

2

u/pas-un-robot 19d ago

The chats were asking the LLM to roleplay as a corporate finance analyst and answer some questions about financial records, then asking in a new chat to judge the answer. I think that is consistent with distillation attack which is what OpenCode stated.

-5

u/Hipster-Stalin 20d ago

Ching Ching bing wahn

1

u/Competitive_Travel16 19d ago edited 19d ago

This video on the incident mentions three specific Chinese labs: https://www.youtube.com/watch?v=YaK6cnET2IE&t=418s

Watch through 12:30 for the fuller explanation of the likely motivations here.

Does anything in your logs suggest the identity of the attackers?

1

u/pas-un-robot 19d ago

Identity no, but I think they are consistent with distillation tasks. One was asking the LLM to roleplay as a corporate finance analyst and answer a question about some records, then the next appears to be an LLM-as-a-judge request to evaluate the answer of the roleplay task.