Northflank Breached - Hacker News

Posted by js4ever 21 hours ago

Northflank Breached(status.northflank.com)

445 points | 317 commentspage 4

loveandhelp 8 hours ago|

How to cut a piece of the left ribs? \s

Not in English majority speaking place at the moment so not surprised "runtime platform" for "autonomous software" is not immediately understood as the somewhat etymological contradiction that it is. Runtime doesn't even have a definition, really. but autonomous implies independent and not ran / hurried like bison off a cliff...

platform and software

sergiotapia 20 hours ago||

So sad...

Unfortunately I'm not longer using PaaS tools. Instead I use Azure for work and vps now for all my personal stuff. With AI it's easier than ever to lock a server down tight and mitigate this kind of exposure.

I'm actually pretty pissed at this now. I have a throwaway appstore app that uses northflank for the backend, now I have to go in and rotate revenuecat secrets, apple secrets, ai secrets. For an app with basically 2 users.

Can I even delete the app on apple's app store or whats the process like what a pain in the ass. I'm pretty done tbh.

yellow_lead 19 hours ago|

Azure? Really?

postalcoder 20 hours ago|

I feel like these breaches started to accelerate after Anthropic wrote a full post about how easy it is to abliterate glm 5.3 to make a frontier-level cyber model.

Now, to be clear, abliteration was no state secret, but that blog post was pure accelerationism.

tptacek 20 hours ago||

That was just 30 days ago. This has been happening for months. Part of the "Black October" narrative is just vulnerability research; Calif didn't abliterate 5.3 to find PHP2Shell.

postalcoder 19 hours ago|||

Yeah IIRC calif research on php2shell preceded all of that but I still stand by the thought that Anthropic has been the most accelerationist AI company despite its lip service to the notion of safety.

tptacek 19 hours ago||

I don't have a take about Anthropic generally. The blog post was quite good. The blog post did not cause October's security debacles.

postalcoder 19 hours ago||

It was a good blog post yes, but I think you’re underplaying the bannister effect of Anthropic coming out and endorsing glm 5.3’s cyberattack prowess.

arjie 9 hours ago|||

I think they definitely boosted usage. I certainly started using the -cyber models defensively against my own systems. But defenders like me are usually late to the party. I think the attackers have been here for a while but that the technology reached performance only recently.

tptacek 19 hours ago|||

The idea that attackers were waiting for Anthropic to tip them off on this is kind of risible. It's been a huge topic amongst practitioners for the better part of a year, and practitioners are usually a step or two behind dedicated criminal or state-sponsored attackers.

_notreallyme_ 19 hours ago|||

They are using mythos-5.5, which is still better than an abliterated GLM-5.3.

tptacek 19 hours ago||

Right, that's kind of my point. Also: it's a good blog post (the Anthropic one), but it observes abliterated 5.3 models were already public. It's not like people who break into computers didn't know that already. They're not waiting for Anthropic to tell them about open weight models; they already live in the world of open weight models.

nater5000 18 hours ago|||

Duh, the idea that those capable of actually utilizing these models for these purposes weren't aware that they could use these models for these purposes up until Anthropic released a blog post about it is silly. Anybody who is even a bit tech literate has been well aware of this inevitability for basically as long as open-weight models have been a thing.

The timing of all of this is much easier to pin to the creation and proliferation of capable of open weight models. Anthropic calling this out is not the cause for it; it's just an obvious correlation.

paxy 19 hours ago|||

lol no, abliteration communities have existed and abliterated models routinely published long before Anthropic wrote that post last month.

What’s changing now is that models are getting more powerful.

sandeepkd 19 hours ago||

You are running a machine with tons of vendor provided agents/scripts to do god knows what on a cloud provider which itself runs tons of agents/scripts to manage that infrastructure and then you expect to be secure.

And no, before the labs there was a degree of fear for everyone to hack into some one else system. With the labs changing the narrative, anyone can just blame the agents for the breach, whoever did it would only get fame and no blame