5 ms·
Primeagen exposes critical security leak in Cognition
- deleted 2y ago[deleted]
- m_ke 2y agoWhat actually happened?
- candid_resumes 2y agoThe vods are taken down for the time being as the cognition team takes time to triage and address the issue. Will post a link later when it's addressed. tldr - devin can disclose private access to repos that users should not have had access to. rip. I guess this is more a disclaimer to share not widely known opsec risk with using devin currently. If you want your code to not be public, reassess your options. If you are currently onboarded, it is likely your code in some capacity is easily retrievable for the short term. Consider revoking privileges immediately.
- m_ke 2y agoWas it access to cognition_labs repos or a github key that gave access to customer repos?
- 0xbanon 2y agoLink to vod https://x.com/0xbanonmilk/status/1867307944154738828 https://x.com/0xbanonmilk/status/1867307944154738828