News for hackers. Stuff that matters.
Re:We got admin access to Baseten's production GitHub in 25 ... by fn-mote on Tuesday September 15, 2026 @08:34PM (#49720704)
> it’s still too expensive to go after “boring” enterprise targets?

The economic argument seems convincing to me. I can’t tell what your stance on it is.

You’re the only one that knows the value of these targets, but “not worth it” seems likely to me.

Re:We got admin access to Baseten's production GitHub in 25 ... by jiggawatts on Tuesday September 15, 2026 @11:04PM (#49721639)
It's a risk-reward ratio, same as anything else, whether legal or illegal.

You wouldn't organise the equivalent of an elaborate bank heist to break into a child's piggy bank, it's just not worth it.

I have heard of a few high profile crypto heists that appear to be AI-assisted, some as far back as the GPT 3.5 era. There was an article I can't find any more about someone accidentally pushing a security fix to a public repo and getting their wallets drained via that specific mechanism within something like an hour.

Malicious actors are watching crypto like a cat in front of a mouse hole, because a "success" can net them the equivalent of hundreds of millions of USD that they can instantly transfer, launder, and spend.

For comparison, what would they achieve by hacking the web site of a local council or public library? Cause some embarrassment? Attempt to crypto-locker them? What are the chances of a payout? Certainly not a 100%, and you're also certain to get the attention of the local equivalent of the FBI or Homeland Security.