Thread

1. rwmj · 1790091370 · focus · HN ↗

   Seriously, no bug bounty for that? For exfiltrating the entire content of the system?

   1. amluto · 1790091648 · focus · HN ↗

      This seems like it’s barely a bug. Of course the files in the agent environment are not secret.

      1. paimapi · 1790091895 · focus · HN ↗

         quite literally the fifth sentence:

         >There were also SSH key files.

         1. DaSHacka · 1790092632 · focus · HN ↗

            They don't specify if they were public or private keys though.

            And even if private, whether they're not just generated per-user anyway, to grant muse the ability to do key-based auth on remote servers (and obviously leaking 'your' own keys wouldn't matter to meta)

            I was hoping for a little more detail in that regard, that's the only potentially large finding. I truly can't imagine meta left production ssh keys in the agent VM, it just wouldn't make any sense though

            1. lxgr · 1790196882 · focus · HN ↗

               The entire point of Muse is that it's an agent with superuser access to a Linux VM. Of course this can include public and private keys, but these are in a way all your keys as the user of the agent.

Unofficial Hacker News client; not affiliated with Y Combinator.