> We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
> We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
Further:
> Third party keys saved in your workspace may have been exposed
https://x.com/WispyWinter/status/2111542806099722698/photo/1
Does anyone understand why they are calling this a distillation attack?
> Does anyone understand why they are calling this a distillation attack?
They think their customers reading that post are idiots so it's easy to convince them of the distillation boogeyman instead of owning the breach.
I guess that was what they believe the attacker intended to use the stolen keys for?