Hacker News Reader

Comment by munchausen42 | Hacker News Reader

Ok so to summarize: Credentials have been stolen using a rather common malware from some people that didn't protect their computers properly. A subset of those credentials were related to OpenAI - while at the same time this malware (or malware like this) is used to steal gmail-, outlook-, amazon-, facebook- and all other kinds of credentials of services where potentially sensitive information is often entered.

Wow, we really are at the point where you just need to insert "ChatGPT" into some boring random headline to make it news :)

View on HN

> we really are at the point where you just need to insert "ChatGPT" into some boring random headline to make it news

No, we're at the point where the inserted item is ChatGPT, it's been many things in the past and I'm sure it'll be many other things in the future too. The pattern of cherry-picking to sensationalize headlines is as old as headlines.

> Wow, we really are at the point where you just need to insert "ChatGPT"

Except companies with valuations in the billions should be monitoring the darkweb and automatically revoking/resetting compromised accounts. Every good-sized bank and credit card provider does it.

On the annoying side, I have a 20yo email address... A CC provider notifies me every time it sees my email on a new list. But it doesn't give the origin of the list, the site(s) that were compromised, so the notification in and of itself is almost worse than useless since it's pure noise.

Almost all of my logins are generated 30-character passwords that are from/in my Bitwarden setup. I only have about 4 I have to remember (actual computer logins for work/personal and my password for Bitwarden). Exception being streaming sites (hulu, hbo max, etc) since getting 30 characters in on a TV is a pain.

I also have a host server passphrase that is words, since in the worst case, getting the random 30 was impossible in the 30s I had to enter it on a terminal view that can't paste, I had to completely reset it once (It was when first setting it up so nothing lost), but a pain.

well TBH i tried that on a video and it does work. Clickbait is real and reliable

Visual Basic Script (VBS) files inside zip files that people opened from emails. So they probably lost a lot more than some ChatGPT creds.

I was hoping this was going to be "OpenAI people used ChatGPT to write their authentication code" ;)

That’s because the seller is advertising

Reply on news.ycombinator.com