Anton

AI search • AI automations • AppSec

[Anton @anton_nashh]

Yeah, more and more confirmations coming in about leaked API keys from Railway builds. Check and rotate your keys ASAP.

@Railway @JustJake any updates?

[Anton @anton_nashh]

Friendly heads-up: if any of your API keys or secrets were used in a @Railway build, check their recent activity. Multiple people are reporting suspicious usage. The cause isn’t confirmed, but if anything looks unfamiliar, rotate the affected key and investigate.

[Anton @anton_nashh]

@NathenFernandes Yeah, looks like it, received multiple DMs with the same story: one guy lost like 2.5k$ in OpenAI credits.

[Anton @anton_nashh]

@JustJake @benjamin_ACD @itsnoahd @goforbg @Railway @andyocn @JustJake any updates on this? More and more people are posting similar stories.

[Anton @anton_nashh]

@federicojan_ @JustJake @benjamin_ACD @itsnoahd @goforbg @Railway Yeah, you can check comments, multiple people reported same

[Anton @anton_nashh]

@jscheel @JustJake @benjamin_ACD @itsnoahd @goforbg @Railway No reports yet, at least 4 people claimed the same

[Anton @anton_nashh]

@JustJake @benjamin_ACD @itsnoahd @goforbg @Railway @andyocn @TimAllard commented on my post about this, @discotoshi posted similar story.

[Anton @anton_nashh]

@JustJake @benjamin_ACD @itsnoahd @goforbg @Railway For specific Railway account details, you can reach @andyocn. If you need Application Security assistance, DM me, sure.

[Anton @anton_nashh]

@JustJake @benjamin_ACD @itsnoahd @goforbg @Railway Looks like you have security incident. Several people, including my friend, are reporting suspicious use of OpenAI, OpenRouter, and other API keys today. Those keys were present in Railway builds.

[Anton @anton_nashh]

Friendly heads-up: if any of your API keys or secrets were used in a @Railway build, check their recent activity. Multiple people are reporting suspicious usage. The cause isn’t confirmed, but if anything looks unfamiliar, rotate the affected key and investigate.

[Anton @anton_nashh]

My friend @andyocn spotted suspicious usage on his OpenAI API key today. We investigated and found it had been used in a @Railway build.

Railway reports an outage, but we have no confirmation of a breach or how the key was exposed.

Anyone else seeing suspicious API usage?

[Sigma Software @sigmaswgroup]

Think a brand's own website is what AI assistants cite?

On questions where nobody names the brand, its own pages hold just 2% of citation seats. Editorial publications hold 32% - the biggest share.

That gap is the opportunity. Right now publishers can package LLM visibility and sell it as a media product: #BCN, #Axios, @Forbes, @TIME and @washingtonpost already do.

@anton_nashh, our AI Search researcher, measured what actually sits underneath that buy.
Read the full analysis 👇
https://t.co/5vWDRINVav

#AI #GEO #LLMvisibility #SigmaSoftware

[Anton @anton_nashh]

@giffmana People who are asking how it works: check what is C2PA

[Anton @anton_nashh]

@saikurrra https://t.co/ZGenOUganG
Dropped higgsfield like couple months ago, 0 regrets

[Anton @anton_nashh]

@Mkpareek19_ Definitely c, keep grinding

[Anton @anton_nashh]

@forgebitz But still now it’s much easier to make a good product, so I would say that claim is partially true. Distribution and marketing are more important than ever.

[Max Sturtevant @maxwellcopy]

I need to make more fucking money

[Anton @anton_nashh]

@natelorenzen Watched whole video

[Anton @anton_nashh]

@jackfriks Best scenario, that’s how truly great products arise

[Anton @anton_nashh]

@kalashvasaniya It doesn't work, come on. Multiple sources claim that LLMs don't care about llms.txt. Stop pushing this bullshit!

[Anton @anton_nashh]

@glenngabe I don’t know anyone who’s actually using it. Is it just me?