Hacker News Reader

> Does anyone understand why they are calling this a distillation attack?

They think their customers reading that post are idiots so it's easy to convince them of the distillation boogeyman instead of owning the breach.

View on HN

The first sentence of the link is "We had a security breach." For distillation is just like saying it was a ransomware attack or similar - the attackers had a motivation. Are they supposed to not explain what happened? This is also one of the go to harnesses for using open source models with and a huge part of usership for them is that. Kind of the exact opposite incentives to Anthropic and co here.

The low percentage combined with "distillation attack" makes it sound like it was a few scattered requests across a bunch of attacks, and not the hundreds of dollars in third-party usage billed to random users. There's countless reports of OpenCode users impacted by this who woke up to $300-$1700 bills from Anthropic and OpenAI, but OpenCode didn't mention this or offer to compensate users. (Compensation can still come later of course but it's still worth noting right now)

Reply on news.ycombinator.com