logoalt Hacker News

Ciantic • yesterday at 6:57 PM • 1 reply • view on HN

Only responsible thing in this case would have been for OpenCode people to invalidate all keys. But I guess it is not that straightforward if Anthropic/OpenAI etc don't have endpoint for it.


Replies

ameliaquining • yesterday at 7:26 PM

There's no self-serve endpoint, but OpenCode could send the inference providers the leaked keys and ask for them to be revoked, which is a thing the inference providers can do. It's possible that this'll happen, apparently remediation is still in progress.