Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

cpomagazine.com

Post reply on HN
Print view View original

41–50 of 77 posts

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#41

Post by tomrod »

omeze wrote: post #10

I seriously wonder why, given the Microsoft deal, OpenAI didn't just cede all product development and production-izing of their models to MS while they focus on research. I know smart people work there, some friends included, but OpenAI was never a product-led startup, they were a research org. Ignoring the closed vs open debate for a moment: for all the talk of focus, focus, focus from YC, it seems unfocused to ship…

Eh, MS isn't great engineering IMHO. It's good enough but nowadays tends to have flaky edge cases.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#42

Post by worthless-trash »

omeze wrote: post #40
warbeforepeace wrote: post #36

Earlier quoted context omitted.

you didn't read the article. The stolen OpenAI credentials were stolen using Raccoon Infostealer (78,348), Vidar (12,984), and RedLine (6,773) malware variants. Just my 2 cents.

[flagged]

Your point is reductionary though.

You can't make omelette without eggs, more news at 11. Back to you in the studio John.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#43

Post by carom »

omeze wrote: post #10

I seriously wonder why, given the Microsoft deal, OpenAI didn't just cede all product development and production-izing of their models to MS while they focus on research. I know smart people work there, some friends included, but OpenAI was never a product-led startup, they were a research org. Ignoring the closed vs open debate for a moment: for all the talk of focus, focus, focus from YC, it seems unfocused to ship…

Microsoft is not doing so great in the security department right now.

>Microsoft comes under blistering criticism for “grossly irresponsible” security

https://news.ycombinator.com/item?id=36979532

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#44

Post by haldujai »

itissid wrote: post #34
omeze wrote: post #10

I seriously wonder why, given the Microsoft deal, OpenAI didn't just cede all product development and production-izing of their models to MS while they focus on research. I know smart people work there, some friends included, but OpenAI was never a product-led startup, they were a research org. Ignoring the closed vs open debate for a moment: for all the talk of focus, focus, focus from YC, it seems unfocused to ship…

Noob Thought on why OpenAI collaborated with MS: 1. I have found ChatGPT is very good at parroting back decent quality from learning from structured data. For example, learning reasonable code completions as well as answering technical questions. I find ChatGPT very good resource to have inside VSCode instead of switching to google. 6-7/10 I will accept GPTs output in Copilot. 2. My guess is that Microsoft's pretty c…

They have much larger plays and interests than developer software such as Office/Outlook. Also stops Google from making the same deal as OpenAI needed credits from someone.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#45

Post by jrflowers »

omeze wrote: post #40
warbeforepeace wrote: post #36

Earlier quoted context omitted.

you didn't read the article. The stolen OpenAI credentials were stolen using Raccoon Infostealer (78,348), Vidar (12,984), and RedLine (6,773) malware variants. Just my 2 cents.

[flagged]

I’m guessing the person you’re responding to wasn’t clever enough to figure out that your comment was completely off topic and had nothing whatsoever to do with the article. Only a true genius could see that you saw “openai” and hit the post button with the force of Mjolnir.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#46

Post by anonzzzies »

omeze wrote: post #10

I seriously wonder why, given the Microsoft deal, OpenAI didn't just cede all product development and production-izing of their models to MS while they focus on research. I know smart people work there, some friends included, but OpenAI was never a product-led startup, they were a research org. Ignoring the closed vs open debate for a moment: for all the talk of focus, focus, focus from YC, it seems unfocused to ship…

https://news.ycombinator.com/item?id=36979532

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#47

Post by midnitewarrior »

bonestamp2 wrote: post #24

Out of an abundance of caution, I just went to change my password... and I didn't see a way to change my password. I googled it and you have to log out and then choose "Forgot password?". Hope that saves someone some time.

Thank you very much! I just spent the last 5 minutes in wtf mode trying to find an option to change my password.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#48

Post by jmye »

lolinder wrote: post #37

Is there anything interesting about this story besides that it has OpenAI in the headline? I assumed there was a data breach, but no, this is just 200k credentials stolen from people's computers with normal malware. There are billions of credentials available for sale on the dark web. This particular set doesn't seem significant at all besides that anything with OpenAI gets extra clicks these days.

I’m assuming that part of the issue is the crazy amount of internal company data people have been feeding into the thing. Finding your email password might let me see some memos, but if you’re not very thoughtful, you might’ve pushed all sorts of sensitive data into chat prompts.

I don’t disagree with your premise otherwise, and grant that I might be racing to begin with.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#49

Post by selcuka »

bonestamp2 wrote: post #24

Out of an abundance of caution, I just went to change my password... and I didn't see a way to change my password. I googled it and you have to log out and then choose "Forgot password?". Hope that saves someone some time.

Yes, that seems to be auth0's default password change story [1]. It's annoying and not expected from the so-called leader in authentication.

[1] https://auth0.com/docs/authenticate/database-connections/pas...

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#50

Post by werrett »

jmye wrote: post #48
lolinder wrote: post #37

Is there anything interesting about this story besides that it has OpenAI in the headline? I assumed there was a data breach, but no, this is just 200k credentials stolen from people's computers with normal malware. There are billions of credentials available for sale on the dark web. This particular set doesn't seem significant at all besides that anything with OpenAI gets extra clicks these days.

I’m assuming that part of the issue is the crazy amount of internal company data people have been feeding into the thing. Finding your email password might let me see some memos, but if you’re not very thoughtful, you might’ve pushed all sorts of sensitive data into chat prompts. I don’t disagree with your premise otherwise, and grant that I might be racing to begin with.

Err, no. Compromising your email account will for sure be the worst outcome.

Everything else, including your OpenAI account, are accessible via that email account + a password reset.

Post reply on HN