OpenCode reported a security breach described as a large-scale distillation attack that affected 1.4% of OpenCode Console users. The company said the compromise was limited to a subset of customers who had external providers linked to their accounts and that all impacted users were notified by email. The incident is ongoing, so OpenCode declined to share further technical details, and it said it is working with Anthropic, OpenAI, and Google to investigate and remediate the issue.
The announcement drew wide attention and strong user reactions across the platform, with millions of views and hundreds to thousands of replies and shares. Responses ranged from disbelief and anger over the hack and its potential consequences to sympathy and questions about compensation and safety for users. OpenCode emphasized that users who did not receive an email were not affected, but the limited disclosure and the involvement of major AI providers have left many customers awaiting more concrete updates.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
The Consumer Financial Protection Bureau (CFPB) has launched an investigation into nine large national banks over alleged debanking practices. The inquiry aims to determine whether these banks have unlawfully restricted access to banking services. (forbes.com)
British Airways has updated its rules to prohibit covert filming of employees with Meta smart glasses, warning that doing so can lead to flight cancellation and refusal of service. The airline can also report incidents to authorities if recording without consent is suspected. (liveandletsfly.com)
The EPA has retracted its claim that the US has phased out the toxic PFAS compounds Pfoa and Pfos. Despite recognizing their dangers, the agency continues to permit production and use of these chemicals in certain products. (theguardian.com)
Namecheap has seized and disabled all domains associated with an account, causing disruption. The user reports being blocked and unable to access their domains or account features. (reddit.com)
Python's precompiled binary wheels simplify package installation but pose security risks because attackers can upload malicious binaries that do not match the source code. Analyzing and verifying binary integrity is difficult, making supply chain attacks increasingly likely in the Python ecosystem. (rushter.com)
Microsoft has withdrawn from a major AI datacentre project in Essex due to concerns over power supply stability. The project, led by UK firm Nscale, was expected to be the largest of its kind in the country. (theguardian.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.