Live data from Hacker News

200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

cpomagazine.com

21–30 of 77 posts

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#22
post #10

I seriously wonder why, given the Microsoft deal, OpenAI didn't just cede all product development and production-izing of their models to MS while they focus on research. I know smart people work there, some friends included, but OpenAI was never a product-led startup, they were a research org. Ignoring the closed vs open debate for a moment: for all the talk of focus, focus, focus from YC, it seems unfocused to ship…

What did OpenAI do wrong here? As far as I can tell they're guilty of requiring logins?

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#25
> The stolen OpenAI credentials were stolen using Raccoon Infostealer (78,348), Vidar (12,984), and RedLine (6,773) malware variants.

> India occupied the top spot with 12,632 OpenAI credentials listed on the dark web, followed by Pakistan (9,217), Brazil (6,531), Vietnam (4,771), and Egypt (4,588), while the United States was sixth with 2,995 compromised accounts.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#26
post #10

I seriously wonder why, given the Microsoft deal, OpenAI didn't just cede all product development and production-izing of their models to MS while they focus on research. I know smart people work there, some friends included, but OpenAI was never a product-led startup, they were a research org. Ignoring the closed vs open debate for a moment: for all the talk of focus, focus, focus from YC, it seems unfocused to ship…

Because when you accidentally discover a golden goose, you don’t give it to Microsoft, you learn to cook eggs.

I had the same thought as you at first, and many people speculated they’d shutter ChatGPT in favor of the API being served to others. But while anyone can sell an API, making a consumer product people want is just too rare to give it up. It’s better to learn how to service consumers and satisfy the demand.

Everyone was quick to point out that the API costs of a chatGPT clone were a fraction of the cost of ChatGPT+. So why would they focus on research and API development? I worry that they were so successful with this LLM that they’ll forget to keep researching other stuff.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#27
post #7

This is the only reason I’m hesitant to use GPT4. I’m not sure how safe they can keep my credit card details.

OpenAI doesn't ever see your CC number. They use Stripe and so your credit card number is stored with them, not OpenAI. But if you're worried and in the US, a privacy.com card could be used to protect you regardless.

Is that a recent development? Didn’t see that mentioned a couple of months ago.

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#28
Super botnet ballet. A few dozen could be an annoyance, a thousand could represent enough compute to worry netd.

Has anyone written any infosec articles discussing this? Has assimov or the Simpsons poked fun at this as a danger yet?

Re: 200k Compromised OpenAI Credentials Available for Purchase on the Dark Web

#30

> The stolen OpenAI credentials were stolen using Raccoon Infostealer (78,348), Vidar (12,984), and RedLine (6,773) malware variants. Nothing to worry about unless you had malware on your computer -- sniffing all your data, OpenAI credentials included. It is only news because ChatGPT logs potentially have exploitable data in them. Another misleading headline -- OpenAI has not been compromised.

> It is only news because ChatGPT logs potentially have exploitable data in them.

Can you access logs of the chat over the API? I assume it’s just news because it’s a popular business (and everyone was using the API to recreate chatgpt so there were a million projects that could be exploited).

Post reply on HN