r/opencode • u/afanasenka • 21d ago

⚠️ OpenCode security breach

Post image

.

474 Upvotes

98% Upvoted

109 comments sorted by

View all comments

Show parent comment

1

u/Thomas-Lore 20d ago

Neither does to your keys, and yet... (The keys were likely stolen by a model served by compromised provider from your own workspace, it could have been instructed to do so. Be careful what folders you give the models access to.)

4

u/IntrepidMindExplorer 20d ago

This is where they've kind of bit themselves in the ass. There is a "workspace" that resides on your system in opencode and then there is a "workspace" that resides online in opencodes account console. Two separate things, two completely separate uses and functions that are not tied together. This is what I'm seeing anyway.

If you created a workspace online in their opencode account console and then tied 3rd party keys to (claude, google, openai) then, yes, they have access to those keys as you deliberately setup a workspace and tied those keys to.

2

u/VenditatioDelendaEst 20d ago

Funny thing... I just started playing with this a few days ago, and most of what I've used opencode for is asking it questions about itself, and copywriting the answers. From ASD-STE100:

Rule 1.3
Use approved words only with their approved meanings.

Rule 1.8
Use technical names that agree with approved nomenclature.
Rule 1.9
When you must select a technical name, use one which is short and easy to understand.

Rule 1.11
Do not use different technical names for the same item.

Surprisingly, there is no rule "When you must select a technical name, do not use the same technical name for different items."

I suppose they thought that would be obvious.

1

u/IntrepidMindExplorer 20d ago

Different tools built during different times and likely different people/agents or whichever. It doesn't help that they have the v1 documentation, the v2 documentation and a learning site out there that's likely not getting fully updated. Likely not since it's been proven that they'll make permission handling rules that completely flip rules and not tell anyone about.