Security researcher Matt Johansen reported that OpenCode experienced a confirmed breach in which customer API keys were stolen, and the company is instructing customers to revoke compromised credentials. Several customers say they received breach notices and that stolen keys have already been used to incur charges. The alert came on Oct 17, 2026 at 3:30 PM and quickly drew large attention, though mainstream outlets had not yet widely covered the incident at the time of the report.
Responses from the security community ranged from wry commentary to requests for more detail: some observers joked about "OpenCode opening your code," while others demanded an official company statement and clarity about the attack vector. A key technical question raised is how attackers accessed usable keys if those keys were supposedly stored or encrypted securely. Engagement metrics and multiple direct reports suggest the incident is active and impactful, but critical specifics - scope of affected customers, how keys were exposed, timeline of exploitation, and OpenCode’s formal disclosure - remain unresolved.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Meta removed the No Kings Instagram account during a protest day. The action appears to be influenced by government pressure, raising concerns about social media censorship. (meidasnews.com)
Strikes on Yandex data centers in Russia led to an 84% decline in bot activity, especially on Facebook and Telegram. The attacks caused the shutdown of key facilities, significantly reducing the dissemination of inauthentic content. (cpd.gov.ua)
A retired Penn professor was arrested for blocking an Uber Eats robot during a protest. The incident highlights tensions over sidewalk space and delivery robot operations. (phillyvoice.com)
Russia launched six satellites into low Earth orbit in April 2026, with five performing maneuvers to match the orbit of a Ukrainian-used satellite. These movements suggest the satellites may be designed to intercept or potentially destroy other objects in space. (bsky.app)
Educational Testing Service (ETS) experienced a data breach involving unauthorized access to student information from a secure file transfer protocol site. The California Department of Education is notifying affected students and has taken measures to improve security, including creating a new SFTP site. (reuters.com)
TikTok has permanently suspended the account promoting the documentary _Musk_ amid its expanding theatrical release. The platform cited violations of its policies related to political content, though specific reasons remain unclear. (avclub.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.