Binance-hacker-1029 – $5.6B stolen from Binance

Re:Binance-hacker-1029 – $5.6B stolen from Binance by dewey on Friday October 30, 2026 @03:50AM (#50300916)

These days I’m getting so many 1Password prompts for agents pulling env variables out of it and with very little context of what is being accessed by who (The dialog 1Password shows is pretty bad) that it would be very easy for something to slip in there.

[ Parent | on HN ]

Re:Binance-hacker-1029 – $5.6B stolen from Binance by caaqil on Friday October 30, 2026 @04:15AM (#50301091)

> I’m getting so many 1Password prompts for agents pulling env variables out of it and with very little context of what is being accessed by who

This is a one-sentence horror story. I almost can't believe someone would let this happen, unless the 1Password account is not important (highly unlikely).

[ Parent | on HN ]

Re:Binance-hacker-1029 – $5.6B stolen from Binance by dewey on Friday October 30, 2026 @04:20AM (#50301117)

I know it sounds bad, but it’s the reality for most people, just like permission prompts at every corner and after each macOS / app update (“Your screenshot app is watching your screen”, no shit, that’s why I installed it).

[ Parent | on HN ]

Re:Binance-hacker-1029 – $5.6B stolen from Binance by Hnrobert42 on Friday October 30, 2026 @06:12AM (#50301900)

Permission fatigue is real.

[ Parent | on HN ]

Re:Binance-hacker-1029 – $5.6B stolen from Binance by heartbreak on Friday October 30, 2026 @09:20PM (#50312297)

What does your sandboxing look like that you’re willing to give agents credentials real enough to store in 1Pass?

[ Parent | on HN ]

Re:Binance-hacker-1029 – $5.6B stolen from Binance by dewey on Saturday October 31, 2026 @03:33AM (#50313980)

The dirty little secret of our industry is that everyone runs agents with full disk access on their machines as there's no good way to sandbox it. This also precisely why Apple posted a newsroom article a few days ago about this topic: https://developer.apple.com/news/?id=p6zjojqw

Blaming this on the user is a bit like blaming someone for doing their banking on their regular day to day computer instead of an air gapped machine.

[ Parent | on HN ]

Re:Binance-hacker-1029 – $5.6B stolen from Binance by gewetensleegte on Saturday October 31, 2026 @05:48AM (#50314498)

Speak for yourself :-)

[ Parent | on HN ]

Re:Binance-hacker-1029 – $5.6B stolen from Binance by heartbreak on Sunday November 01, 2026 @12:57PM (#50327936)

Yeah, I don’t know about that. We use VDI and dedicated agent accounts. Sort of like I’ve got my super user account for production server access via a different VDI, now I’ve got my -agent account for the agent VDI.

[ Parent | on HN ]