SShortSingh.
Back to feed

OpenCode Warns 1.4% of Console Users to Rotate OpenAI and Anthropic Keys After Breach

0
·4 views

OpenCode disclosed a security breach on October 17 affecting a legacy system it had been decommissioning. The company says third-party provider keys saved in Console workspaces, such as those for OpenAI and Anthropic, may have been exposed. Roughly 1.4% of Console users were affected, and OpenCode says it has emailed them and is working with Anthropic, OpenAI and Google on remediation. Affected users are advised to revoke and replace their keys, update applications, and check recent usage for unexpected activity. Key details, including how the attacker gained access and the number of compromised accounts, have not been disclosed.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Meta-learning method aims to keep aquaculture sensors accurate on low-power solar buoys

The article describes a technique called meta-optimized continual adaptation for water-quality monitoring in fish farms running on low-power autonomous devices. It grew out of a field trip to a tilapia farm, where solar sensor buoys suffered from membrane biofilm drift, algae-driven shifts in turbidity readings, and rapid battery drain. The author argues that aquaculture data is highly non-stationary, labels such as calibrated oxygen readings are scarce, and power budgets are tight, all of which constrain system design. The proposed approach combines meta-learning, continual learning, and edge-efficient inference so that a model can adapt quickly from few examples while retaining critical knowledge, such as detecting genuine low-oxygen events. The piece also notes that the author is still working through unresolved challenges.

0
ProgrammingDEV Community ·

Remote developer weekly release rhythm: Monday planning, midweek previews, Friday delivery

The article describes a fixed weekly workflow for working with a remote developer, aimed at making progress visible between calls. Each week begins with a short call to agree on what should go live by Friday, with large tasks split into independently workable pieces. Midweek, the client receives a preview link to test in-progress work and give feedback while changes are still inexpensive. Releases ship on Friday with plain-language notes covering what changed, what to check, and what comes next. The code stays in the client's own repository from the start, and the approach is said to suit ongoing product work rather than one-off fixes or projects lacking a clear goal.

0
ProgrammingDEV Community ·

Awas drops AI-proposed scam evidence unless quotes match pages verbatim

A developer built Awas, a tool that checks job ads for recruitment scam signs, for the Nebius Global AI Hackathon. The original plan was to find published reports about each advertised company, but only 8 of 20 known scam cases met the 12-case target. Reports also rarely named the recruiting company, so the author rescoped the verdict to rules quoted from official pages. Web search now only supplies context for families, not inputs to the rules. A code gate keeps model-proposed evidence only when its quote appears word for word in the fetched page, and the author published the failed coverage result.

0
ProgrammingDEV Community ·

Customer-Support Knowledge Base Crawl Limits: Lower Index Cost, Traceable Retrieval

A DEV Community article argues that a fintech support knowledge base should use staged retrieval with explicit collections, bounded queries, and traceable sources. It recommends indexing only approved help content and attaching tenant, access, and version metadata to every document. The author suggests treating crawl boundaries as a product rule, defining owners, URL prefixes, and deletion behavior for each source. Queries should name their collection, apply metadata filters before ranking, and enforce a top-k ceiling, since large values raise indexing, reranking, and context costs. The piece includes a Go example that lists vector collections through an API, and notes that any top-k limit should be tested against representative support questions.