5 ms·

why would you do that rather than just revoking the key directly in the anthropic console?

• mingus88 9mo ago
  It’s the key used by the attackers in the payload I think. So you publish it and a scanner will revoke it
  • trees101 9mo ago
    oh I see, you're force-revoking someone else's key
    • rswail 9mo ago
      Which is an interesting DOS attack if you can find someone's key.
      • OJFord 9mo ago
        The interesting thing is that (if you're an attacker) your choice of attack is DoS when you have... anything available to you.
  • freakynit 9mo ago
    Does this mean a program can be written to generate all possible api keys and upload to github thereby revoke everyone's access?
    • kylecazar 9mo ago
      They are designed to be long enough that it's entirely impractical to do this. All possible is a massive number.
      • freakynit 9mo ago
        That's true tho... possible, but impractical.
        • deleted 9mo ago
          [deleted]
        • cortesoft 9mo ago
          Only possible if you are unconstrained by time and storage.
          • eru 9mo ago
            Not only you, but GitHub too, since you need to upload. Storage is actually not much of a problem (on your end): you can just generate them on the fly.
        • antonvs 9mo ago
          Not possible given the amount of matter in the solar system and the amount of time before the Sun dies.