Alex

[Alex @AlexSed90]

I can’t believe how shitty Costco mobile shopping experience is. You have to navigate 4 pages until you can add something to your cart

[Alex @AlexSed90]

I don’t feel bad, any company that stores api keys on their servers in an insecure way deserve to be hacked

[Ian Livingstone @ianlivingstone]

I really feel for the OpenCode team, as agentic attacks are becoming more common and defending against them is difficult, especially when you’re also trying to build something people love.

If you’re affected, rotate your keys immediately and check your provider audit and usage logs for unauthorized activity.

There is a path forward where connecting a tool doesn’t mean handing it a long-lived key. Workload identity federation and delegation let us issue short-lived, scoped access, while proof of possession means a copied token alone isn’t enough to use it elsewhere.

We don’t yet know the full details of this incident, but we can make progress together on reducing what an attacker can steal and reuse. That’s a big part of what we’re building at @KeycardAI, alongside centralized audit logs and the ability to revoke access where it’s enforced.

[Alex @AlexSed90]

@mattjay It sounds cool because

[Alex @AlexSed90]

Emmm so the keys were on their servers? Wtf

[Matt Johansen @mattjay]

🚨 Confirmed. OpenCode hacked. Keys stolen.

Telling customers to revoke.

[Alex @AlexSed90]

@fayazara I mean people who use the terminal probably don't care about prettiness

[Alex @AlexSed90]

@thekitze Damn

[Alex @AlexSed90]

@Porsche Not a good day

[Alex @AlexSed90]

@MKBHD Do you wanna be double bald sir?

[Alex @AlexSed90]

@minchoi Wair where does it say it is deployed to Teslas? Which version?

[Alex @AlexSed90]

@peduarte Same i'm not trying to convince you it's a bad decision to bundle BYOK under a paid plan and have your users (yours truly after 3 years of a paid plan) leave to try other forks and open source solutions, and basically finding it the same experience so far

[Alex @AlexSed90]

@peduarte I'm pretty sure anyone who knows how to bring their own keys is technical enough to vibe clone that UI functionality. I just wanted to point out it is really not a great value as you think it is for 8 per month

[Alex @AlexSed90]

@_Rock718 damn

[Alex @AlexSed90]

I'm sick of researchers improving weather forecasting literally every week in the headlines and still the damn forecasts can't reliably predict the next hour

[Alex @AlexSed90]

@peduarte Sorry what do you mean it is only possible through our UI?

[Alex @AlexSed90]

I can only see 3 distinct icons, am i blind?

[Andreas Storm @avstorm]

What's new in macOS 27.2 beta 4

[Alex @AlexSed90]

@linuz90 I mean some people play games on smart fridges too so maybe they should have 120Hz too

[Alex @AlexSed90]

@thekitze Does it use codex sub? I think you get flagged to use CC sub for third party right?

[Alex @AlexSed90]

@LondonMond @Rainmaker1973 Human mind panic, we are not robots

[Alex @AlexSed90]

@theo @lucapette Banger