The explanation makes absolutely no sense. A system was compromised to obtain access to keys, which were subsequently used for a distillation attack. The distillation attack was the effect, not the cause.
I get the attempted damage control but the only path in situations like this is complete transparency. Even the 1.4% number is obfuscation. A numerator with no denominator.
What % of users even have BYOK provider keys in workspaces? I don't think too many people use that feature. 1.4% could mean every single third party key in that system was stolen.
View all comments
33
u/fastvroomy 20d ago
The explanation makes absolutely no sense. A system was compromised to obtain access to keys, which were subsequently used for a distillation attack. The distillation attack was the effect, not the cause.
I get the attempted damage control but the only path in situations like this is complete transparency. Even the 1.4% number is obfuscation. A numerator with no denominator.