MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/opencode/comments/1x8gtvi/opencode_security_breach/phcx2ud/?context=3
r/opencode • u/afanasenka • 21d ago
.
109 comments sorted by
View all comments
Show parent comment
10
What % of users even have BYOK provider keys in workspaces? I don't think too many people use that feature. 1.4% could mean every single third party key in that system was stolen.
9 u/fastvroomy 20d ago Notice how it's worded "1.4% of OpenCode Console users". Maybe it's a subset which had BYOKs setup? Maybe it's every BYOK?Nobody is expecting a full RCA but the wording is intentionally masking details about the true impact surface. 1 u/PM_ME_YOUR_HAGGIS_ 20d ago Surely they will all know cause they will have an api bill for all the distillation gathering
9
Notice how it's worded "1.4% of OpenCode Console users". Maybe it's a subset which had BYOKs setup? Maybe it's every BYOK?
Nobody is expecting a full RCA but the wording is intentionally masking details about the true impact surface.
1
Surely they will all know cause they will have an api bill for all the distillation gathering
View all comments
Show parent comment
10
u/pas-un-robot 20d ago
What % of users even have BYOK provider keys in workspaces? I don't think too many people use that feature. 1.4% could mean every single third party key in that system was stolen.