Hacker News Reader

I'm rotating production secrets all night... great. I confirmed that they've actually used many of my secret keys already.

View on HN

Which secrets were they using?

The secret ones

So far I found they accessed my S3 buckets, used my OpenAI key (which OpenAI thankfully detected odd behaviour and revoked the key automatically), did readonly operations on my Valkey instance, etc.

What were they trying to do with OpenAI tokens? What actual requests were they making?

Was it just to create damage? i.e. create unnecessary spend to cause trouble? Or were they trying to use the LLMs for a specific reason?

Reply on news.ycombinator.com