Now if only we knew if the stonks would go up or down (due to global turmoil) before I throw my savings at the SPY","title":null,"type":"comment","url":null},{"author":"swyx","children":[{"author":"mtlynch","children":[{"author":"sheepscreek","children":[],"created_at":"2026-09-15T19:22:35.000Z","created_at_i":1789500155,"id":49717521,"options":[],"parent_id":49717156,"points":null,"story_id":49716476,"text":"Yeah companies need to quickly understand that having good actors try and hack you is a good thing - those hacks get reported and another door gets sealed shut for bad actors.
This is more true today than ever before as the bar for a successful attack has never been lower. We\u2019ll see a resurgence of the script-kiddie, or shall I say, vibe-kiddie :-/","title":null,"type":"comment","url":null},{"author":"manquer","children":[{"author":"sublinear","children":[{"author":"jazzpush2","children":[],"created_at":"2026-09-15T20:04:55.000Z","created_at_i":1789502695,"id":49718119,"options":[],"parent_id":49717968,"points":null,"story_id":49716476,"text":"It's nice to wax poetic, but they should absolutely pay the researchers here.","title":null,"type":"comment","url":null},{"author":"r_lee","children":[],"created_at":"2026-09-15T20:31:54.000Z","created_at_i":1789504314,"id":49718506,"options":[],"parent_id":49717968,"points":null,"story_id":49716476,"text":"> The follow up arguments will be that since billion dollar companies ultimately only care about their bottom line, so should we.
so it should be fought by giving them free work in the hopes that they'll finally feel guilty and then start paying proper bounties?
like to me that just seems funny, as if they'd change anything if we'd keep rewarding them for not doing the right thing
like, there's a reason regulation exists for all kinds of shit because otherwise companies would do all kinds of atrocities in hopes of cutting costs","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:52:53.000Z","created_at_i":1789501973,"id":49717968,"options":[],"parent_id":49717754,"points":null,"story_id":49716476,"text":"Thank you for pushing back on one of the top disruptive bad-faith comments we see on HN.
The follow up arguments will be that since billion dollar companies ultimately only care about their bottom line, so should we.
I'm certain most of these comments mean well (to "open eyes" or whatever), but some of them really are on principle and blatant astroturfing.","title":null,"type":"comment","url":null},{"author":"flaunf221","children":[],"created_at":"2026-09-15T20:18:38.000Z","created_at_i":1789503518,"id":49718309,"options":[],"parent_id":49717754,"points":null,"story_id":49716476,"text":"Wallets usually belong to real people with lives. We can empathize with them. Companies are not people. And they also don't and can't empathize with you.","title":null,"type":"comment","url":null},{"author":"r_lee","children":[],"created_at":"2026-09-15T20:26:44.000Z","created_at_i":1789504004,"id":49718435,"options":[],"parent_id":49717754,"points":null,"story_id":49716476,"text":"> The front page post in HN here is worth far more than few thousand dollars , don\u2019t think either organization is operating under purely financial transactional nature .
not always, especially if its just someone independent. iirc there was a guy here not too long ago who started dropping Windows 0days because Microsoft couldn't be assed to process his bug reports","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:37:39.000Z","created_at_i":1789501059,"id":49717754,"options":[],"parent_id":49717156,"points":null,"story_id":49716476,"text":"Swag packages like these are a token of appreciation not a reward.
The front page post in HN here is worth far more than few thousand dollars , don\u2019t think either organization is operating under purely financial transactional nature .
Most people who find a dropped wallet will return it without evaluating the market value of your compromised identity or the contents of the wallet .
Grateful owners may buy you a beer that doesn\u2019t make them cheap , not everything is evaluated in purely money terms, and that is a good thing ?","title":null,"type":"comment","url":null},{"author":"r_lee","children":[],"created_at":"2026-09-15T20:23:01.000Z","created_at_i":1789503781,"id":49718375,"options":[],"parent_id":49717156,"points":null,"story_id":49716476,"text":"of course not, all they can do is a lil "thx"
> This sends the message that honest researchers should not waste their time looking for vulnerabilities in Baseten, but it's a good target for criminals who want to monetize these vulnerabilities.
of course, these companies want you to sell vulns to brokers and other orgs. they don't care about bug reports.
otherwise they'd pay as much or even more, right?","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T18:57:59.000Z","created_at_i":1789498679,"id":49717156,"options":[],"parent_id":49716662,"points":null,"story_id":49716476,"text":"Good in terms of prompt communication and fix. Absurdly bad in terms of reward.
Earlier in the article, it mentions that Baseten is valued at $13B. They can't dig into their couch cushions to give a few thousand dollars to the researcher privately disclosing a bug that let an attacker escalate to admin in their GitHub org?
This sends the message that honest researchers should not waste their time looking for vulnerabilities in Baseten, but it's a good target for criminals who want to monetize these vulnerabilities.","title":null,"type":"comment","url":null},{"author":"polynomial","children":[],"created_at":"2026-09-15T19:20:56.000Z","created_at_i":1789500056,"id":49717497,"options":[],"parent_id":49716662,"points":null,"story_id":49716476,"text":"> They also sent us some T-shirts and sweatshirts as a thank-you for finding this critical bug.
Honestly I would have held out for a (hard to get) hardcover copy of Inference Engineering.","title":null,"type":"comment","url":null},{"author":"taoh","children":[],"created_at":"2026-09-15T20:23:42.000Z","created_at_i":1789503822,"id":49718391,"options":[],"parent_id":49716662,"points":null,"story_id":49716476,"text":"I\u2019d treat a vibecoded agent like an untrusted CI job, not like a junior employee: repo-scoped identity, read-only by default, no inherited Actions token or production secrets. Any operation that turns a read into a write should require approval outside the agent\u2019s control and produce an auditable diff. Network egress belongs in the boundary too. Read-only access is not much protection if the agent can send everything it reads to an arbitrary endpoint.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T18:24:27.000Z","created_at_i":1789496667,"id":49716662,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"> Baseten handled this well. The timeline was:
> July 13, 11:10 PM: I reported the live basetenbot token, the public Harbor project, and the repository permissions.
> July 14, morning: Baseten made the Harbor project private. I flagged that the token itself still worked.
> July 14, 4:34 PM: Anton from Baseten Security confirmed the issue as critical and said they had made the Harbor project private and rotated the token. He also asked us to securely delete the images we'd pulled.
> July 14, 5:05 PM: We confirmed deletion and sent over two lower-severity findings from the same scan.
> July 17: Baseten closed out the remaining findings.
> September: We let Baseten know we planned to disclose the finding publicly and sent them a draft of this post.
They also sent us some T-shirts and sweatshirts as a thank-you for finding this critical bug.
well done all around. i think my only open question is what default security boundaries should all vibecoded internal agents follow as a learning we can take from this","title":null,"type":"comment","url":null},{"author":"ramon156","children":[{"author":"bearsyankees","children":[],"created_at":"2026-09-15T18:49:20.000Z","created_at_i":1789498160,"id":49717006,"options":[],"parent_id":49716701,"points":null,"story_id":49716476,"text":"We've made a lot of awesome changes recently, would love any feedback on the latest version :)","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T18:27:20.000Z","created_at_i":1789496840,"id":49716701,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"i quite liked using strix. last time i tried it, deepseek was a mess and bloated the context with nonsense. that was ~5 months ago, i wonder how it performs now","title":null,"type":"comment","url":null},{"author":"sandeepkd","children":[{"author":"bearsyankees","children":[],"created_at":"2026-09-15T18:39:54.000Z","created_at_i":1789497594,"id":49716878,"options":[],"parent_id":49716722,"points":null,"story_id":49716476,"text":"Yeah... interesting paradigm","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T18:28:36.000Z","created_at_i":1789496916,"id":49716722,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"This sounds interesting and twisted in some sense
1. A start up is validating a service provider to ensure that they are secure enough so that they can trust them before signing up for their service
2. The service provider is already trusted by so many big name companies who handed over their data, the customers data to them
Should it not be other way around?
On a different note, the finding is not just one off absolute, rather its a symptom which points to certain experience and expertise level for security practices. To be fair its hard to blame the start up folks, they are running against time and cutting corners is somewhat critical for survival for their business","title":null,"type":"comment","url":null},{"author":"aatd86","children":[{"author":"bearsyankees","children":[{"author":"lukeify","children":[{"author":"bearsyankees","children":[],"created_at":"2026-09-15T19:25:59.000Z","created_at_i":1789500359,"id":49717579,"options":[],"parent_id":49717283,"points":null,"story_id":49716476,"text":"Yeah understood \u2014 we need to make sure you own the domain first though","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:07:51.000Z","created_at_i":1789499271,"id":49717283,"options":[],"parent_id":49716903,"points":null,"story_id":49716476,"text":"If I enter an address to "Start testing", I expect at least a preview of the report rather than being dumped on the signup page.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T18:41:51.000Z","created_at_i":1789497711,"id":49716903,"options":[],"parent_id":49716849,"points":null,"story_id":49716476,"text":"Let us know if you have any feedback!","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T18:37:37.000Z","created_at_i":1789497457,"id":49716849,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"That is great marketing for strix, pretty bad for baseten.\nI don't think someone can have a better story to advertise their own security product.\nDid not know about strix but I am going to look it up now.\nMight add it to my stack.","title":null,"type":"comment","url":null},{"author":"brewmarche","children":[{"author":"bearsyankees","children":[],"created_at":"2026-09-15T18:44:43.000Z","created_at_i":1789497883,"id":49716939,"options":[],"parent_id":49716931,"points":null,"story_id":49716476,"text":"Yeah honestly I wasn't too familiar with this beforehand but now have a sense of the best practices going forward","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T18:43:54.000Z","created_at_i":1789497834,"id":49716931,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"Yeah I have seen this issue a few times. If you use Docker build arguments that way add `--provenance=false` to get rid of all that build metadata. Build secrets are still better since they allow you to scope the secret inside of the Dockerfile. Also, the metadata can be useful to inspect images.","title":null,"type":"comment","url":null},{"author":"thrownaway22","children":[{"author":"conception","children":[],"created_at":"2026-09-15T19:07:53.000Z","created_at_i":1789499273,"id":49717284,"options":[],"parent_id":49717234,"points":null,"story_id":49716476,"text":"Unless github had regulated data, unlikely, the legal implications are few. Document the issue, remediate and no findings on the next audit. Done.","title":null,"type":"comment","url":null},{"author":"hmokiguess","children":[],"created_at":"2026-09-15T19:12:51.000Z","created_at_i":1789499571,"id":49717369,"options":[],"parent_id":49717234,"points":null,"story_id":49716476,"text":"Given the build is from 2023 one would expect that at least the token would have been rotated, and I suspect some of these compliance checks do require rotation of tokens/passwords.
That said, the whole compliance industry is a joke.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:04:14.000Z","created_at_i":1789499054,"id":49717234,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"Baseten carries the Soc 2 Type II and HIPAA Compliant logos on its front page. They also have logos for customers including: OpenEvidence (medical related, used by almost 2/3 of physicians in the US, claim HIPAA compliance), Harvey (legal related, claim "binding terms on data protection, data access, incident response SLAs, and other controls aligned with SOC2, ISO, GDPR and other standards.")
From TFA:
> That token had admin and push access to Baseten's main product repo, the GitOps repo that drives their clusters, and their Homebrew tap, plus read/write access to other private repositories including specific repos per customers.
> The image build dated to March 2023, and the token still worked when we found it in July 2026.
What are the legal implications here?","title":null,"type":"comment","url":null},{"author":"athrowaway3z","children":[],"created_at":"2026-09-15T19:06:45.000Z","created_at_i":1789499205,"id":49717272,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"A Markdown-as-a-Service where the interface is a Docker container.
I get how these choices might be the local optimum for a desired UX, but damn is it depressing to extrapolate where software as a whole is going.","title":null,"type":"comment","url":null},{"author":"kibac","children":[{"author":"guessmyname","children":[{"author":"bearsyankees","children":[{"author":"kibac","children":[],"created_at":"2026-09-15T20:30:02.000Z","created_at_i":1789504202,"id":49718479,"options":[],"parent_id":49717517,"points":null,"story_id":49716476,"text":"Chinese? I can not imagine how a western state of the art model would follow through with such a task and not require some major trickery.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:22:13.000Z","created_at_i":1789500133,"id":49717517,"options":[],"parent_id":49717403,"points":null,"story_id":49716476,"text":"Neither, actually :)","title":null,"type":"comment","url":null},{"author":"NyxWulf","children":[],"created_at":"2026-09-15T19:23:07.000Z","created_at_i":1789500187,"id":49717534,"options":[],"parent_id":49717403,"points":null,"story_id":49716476,"text":"The writing sounds like Claude to me","title":null,"type":"comment","url":null},{"author":"PaoloBarbolini","children":[],"created_at":"2026-09-15T19:36:32.000Z","created_at_i":1789500992,"id":49717742,"options":[],"parent_id":49717403,"points":null,"story_id":49716476,"text":"Even something like Qwen 3.8 27b could do this.
Lookup certificate transparency and continue from there https://crt.sh/?Identity=baseten.co&exclude=expired&match=IL...","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:14:42.000Z","created_at_i":1789499682,"id":49717403,"options":[],"parent_id":49717311,"points":null,"story_id":49716476,"text":"Either Mythos 5.1 or GPT 5.6 Cyber (aka. GPT Daybreak Red)","title":null,"type":"comment","url":null},{"author":"smallnix","children":[{"author":"bearsyankees","children":[],"created_at":"2026-09-15T19:41:55.000Z","created_at_i":1789501315,"id":49717814,"options":[],"parent_id":49717701,"points":null,"story_id":49716476,"text":"Hate to burst your bubble but wasn't Claude......","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:34:06.000Z","created_at_i":1789500846,"id":49717701,"options":[],"parent_id":49717311,"points":null,"story_id":49716476,"text":"The bot snippets talk claudish. I'd say Opus 5. But they must be Cyber Verification Program approved by Anthropic I suppose for the LLM not to block them.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:09:58.000Z","created_at_i":1789499398,"id":49717311,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"I wonder what model was used for this. Also as far as I know Baseten does not have any abliterated models in their repertoire.","title":null,"type":"comment","url":null},{"author":"hmokiguess","children":[],"created_at":"2026-09-15T19:10:48.000Z","created_at_i":1789499448,"id":49717331,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"An easily preventable issue with proper engineering culture around defense in depth and principle of least privilege, awful look on Baseten here.
Kudos for Strix to find it, and especially with how it chose to disclose and report it.","title":null,"type":"comment","url":null},{"author":"wxw","children":[],"created_at":"2026-09-15T19:14:09.000Z","created_at_i":1789499649,"id":49717393,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"> [pen-testing agent] came back with an active GitHub personal access token for basetenbot. That token had admin and push access to Baseten's main product repo, the GitOps repo that drives their clusters, and their Homebrew tap, plus read/write access to other private repositories including specific repos per customers.
And the agent found the token in Docker build history after finding a Baseten image repository.
I wonder how many of these kinds of agent-driven security exploits we're not hearing about these days (i.e. driven by bad actors), worrying.","title":null,"type":"comment","url":null},{"author":"codemog","children":[{"author":"kadoban","children":[],"created_at":"2026-09-15T19:39:26.000Z","created_at_i":1789501166,"id":49717776,"options":[],"parent_id":49717458,"points":null,"story_id":49716476,"text":"> I know I can\u2019t try and break into my neighbors house even if I have no intent of going inside and stealing once I break the lock.
They didn't break in. They found a key that their neighbor dropped and returned it.
> Is this legal?
Generally, yes (though ask a lawyer if you're going to do security work). Security researchers do occasionally get legal flak though, depending on which idiot they annoy by pointing out issues.","title":null,"type":"comment","url":null},{"author":"stymaar","children":[{"author":"kadoban","children":[{"author":"dwedge","children":[],"created_at":"2026-09-15T20:03:14.000Z","created_at_i":1789502594,"id":49718095,"options":[],"parent_id":49717980,"points":null,"story_id":49716476,"text":"If there is anything that was a crime (and it totally depends on jurisdiction), it was verifying the key. They used it to see what it could access, and by using it they had unauthorised access to a system","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:53:40.000Z","created_at_i":1789502020,"id":49717980,"options":[],"parent_id":49717778,"points":null,"story_id":49716476,"text":"> It's not, in most juridictions at least
What did I miss they did that's illegal? It looked like it downloaded a public docker image, searched around inside, and verified that the key it found was still valid (without making any changes), and then immediately notified them about the issue.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:39:32.000Z","created_at_i":1789501172,"id":49717778,"options":[],"parent_id":49717458,"points":null,"story_id":49716476,"text":"It's not, in most juridictions at least, but it would be insanely stupid for baseten to sue (and the hacker would probably not get much more than a slap on the wrist given that they weren't malicious).","title":null,"type":"comment","url":null},{"author":"bradleybuda","children":[],"created_at":"2026-09-15T19:40:32.000Z","created_at_i":1789501232,"id":49717792,"options":[],"parent_id":49717458,"points":null,"story_id":49716476,"text":"It's implied (but sadly not stated) in the post that they asked for baseten's permission before conducting this research.
What's interesting to me as someone who has sold a lot of software to a lot of software companies is that many enterprise vendor agreements explicitly allow companies to pentest their vendors with advance notice and coordination. I don't think any of our clients ever exercised that clause; I expect it's going to be exercised a lot more going forward because it's so easy to do now.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:18:06.000Z","created_at_i":1789499886,"id":49717458,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"Is this legal? I know I can\u2019t try and break into my neighbors house even if I have no intent of going inside and stealing once I break the lock.","title":null,"type":"comment","url":null},{"author":"calvinmorrison","children":[{"author":"DaSHacka","children":[{"author":"usewik","children":[],"created_at":"2026-09-15T20:18:16.000Z","created_at_i":1789503496,"id":49718299,"options":[],"parent_id":49718177,"points":null,"story_id":49716476,"text":"Feelings don't really matter in the legal world. Statements and actions do.","title":null,"type":"comment","url":null},{"author":"calvinmorrison","children":[],"created_at":"2026-09-15T20:21:47.000Z","created_at_i":1789503707,"id":49718359,"options":[],"parent_id":49718177,"points":null,"story_id":49716476,"text":"if i find someones key on the ground and take the key and walk into their house and poke around, and make sure to leave a letter, this is a good thing?","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T20:10:21.000Z","created_at_i":1789503021,"id":49718177,"options":[],"parent_id":49717587,"points":null,"story_id":49716476,"text":"A lawyers wet dream is when a security company.... Finds an issue, does not abuse it, and reports it to the affected party for it to be patched?
I feel like people like you are more of a lawyers wet dream, in that they'll happily litigate a frivolous case for you while billing you hourly.","title":null,"type":"comment","url":null},{"author":"usewik","children":[],"created_at":"2026-09-15T20:17:23.000Z","created_at_i":1789503443,"id":49718285,"options":[],"parent_id":49717587,"points":null,"story_id":49716476,"text":"Agreed. Pretty sure you are supposed to ask for permission before pentesting someone. Hopefully they, being a security company, know that.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:26:29.000Z","created_at_i":1789500389,"id":49717587,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"> We build Strix, an autonomous hacking again.
> But... we're a security company.
> So... we pointed Strix at *.baseten.co and let it run without credentials or source code.
lawyers wet dream. and a perfect case. A security company who KNOWS the law unleashed an AI agent to violate the laws","title":null,"type":"comment","url":null},{"author":"hunterbrooks","children":[{"author":"bearsyankees","children":[],"created_at":"2026-09-15T19:38:37.000Z","created_at_i":1789501117,"id":49717767,"options":[],"parent_id":49717661,"points":null,"story_id":49716476,"text":"You can also just do an external pentest -- Github is for continuous CI/CD coverage","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T19:31:42.000Z","created_at_i":1789500702,"id":49717661,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"Just signed up for strix, is it common for these type of products to want access to my Github repo's? Shouldn't the attack surface be outside them?","title":null,"type":"comment","url":null},{"author":"mschuster91","children":[],"created_at":"2026-09-15T19:55:18.000Z","created_at_i":1789502118,"id":49718002,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"> So Strix enumerated hosts, looked through certificate logs, mapped the full surface.
If there is anything that you should do while setting up infrastructure... it is getting rid of single-host SSL certificates. If you're on Amazon... just let it issue wildcard certificates and place an ALB in front of hosts that terminates the SSL connection. The very second a subdomain appears in any of the CT logs directly, you've lost, it will get hammered.
And keep your public and private Git, Docker, npm and whatnot registries separate infrastructure, with the private stuff only reachable from within the corporate network, preferably just servers. Too many a company got hacked and lost significant data because of someone exploiting a GitLab RCE on an instance that hosted both private and intentionally-public repositories. (Yes, I have been there.)
> It is their GitOps: the repository contains the desired state of the clusters, and it applies that state to the infrastructure.
That's another thing I frankly do not get why people are still doing it.
It's fine to have a Git pipeline do a lint, even a terraform plan using a read-only token (although that token needs access to the statefile aka s3 bucket... and there will be relevant secrets there). But, IMHO, a terraform apply should always, always be run on a machine of a sysadmin manually doing the apply. A human, you can hold accountable, and you can keep them at a good security posture with short-lived session tokens. But a Git pipeline where there is a cloud provider token with full admin permissions? That is one Gitlab RCE patch or Github issue away from being compromised.
Besides, one repository holding all the IaC stuff? That just sounds like hour long `terraform refresh` sessions.","title":null,"type":"comment","url":null},{"author":"stopthe","children":[],"created_at":"2026-09-15T20:02:16.000Z","created_at_i":1789502536,"id":49718081,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"So often recent breaches involve Github in one way or another. How is it still considered a sane choice to host anything proprietary there? If your business is built around open source, ok, put a mirror on Github. But CI/CD, gitops, FDEs' stuff have no place on a public cloud. C-level execs may not know bits from bytes, but by now they should've understood that this is akin to storing ammonium nitrate in the open air.","title":null,"type":"comment","url":null},{"author":"throwitaway222","children":[],"created_at":"2026-09-15T20:13:31.000Z","created_at_i":1789503211,"id":49718224,"options":[],"parent_id":49716476,"points":null,"story_id":49716476,"text":"It may make sense to change security practices so nothing has long term access. Everything should be rotated monthly, and maybe within a few years, hourly.","title":null,"type":"comment","url":null}],"created_at":"2026-09-15T18:11:24.000Z","created_at_i":1789495884,"id":49716476,"options":[],"parent_id":null,"points":124,"story_id":49716476,"text":null,"title":"We got admin access to Baseten's production GitHub in 25 minutes","type":"story","url":"https://www.strix.ai/blog/baseten-harbor-github-pat-takeover"}