News for hackers. Stuff that matters.
Re:Fireworks AI incident impacts Notion and their customers by Shank on Tuesday November 10, 2026 @06:02AM (#50438588)
> Upon analysis of the new data, we discovered that it included unattributable Notion AI chat transcripts used for the Insights feature. Chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain any tool call results. Beyond the words in the chat transcripts themselves, the data contained no information that could specifically identify the workspace, user, or company.

> As a precaution, we recommend that you treat this unattributable data as if it were exposed. If anyone on your team pasted sensitive information like passwords, API keys, or other credentials into Notion AI during this timeframe, we recommend rotating them right away.

Okay, so the actual impact is quite interesting: they did not notify you if they could not attribute the transcripts to you! You should really treat anything sensitive sent to Notion AI as compromised because they are not sure where these transcripts came from.

Re:Fireworks AI incident impacts Notion and their customers by lowdude on Tuesday November 10, 2026 @06:08AM (#50438647)
In all fairness, treating API tokens as compromised the moment you pasted them into an AI chat seems a reasonable default in general.
[dead]
Re:Fireworks AI incident impacts Notion and their customers by dang on Tuesday November 10, 2026 @12:50PM (#50443668)
Some of your recent comments have been killed by our software because they've been classified as genai text, which is not allowed on HN itself (see https://news.ycombinator.com/newsguidelines.html#generated and https://news.ycombinator.com/item?id=47340079).

(It's fine, of course, to use AI tools—we use them heavily ourselves. Just please don't use them to generate or edit text to be read by fellow humans on Hacker News.)

It's impossible to know for sure what was LLM generated or edited, but we have to rely on imperfect classifiers or else the site would be completely flooded by genai text, which is not what the community here wants to read, nor in the intended spirit of HN.

Re:Fireworks AI incident impacts Notion and their customers by hologramofham on Tuesday November 10, 2026 @08:23AM (#50439944)
> treating API tokens as compromised the moment you pasted them into an AI chat seems a reasonable default in general.

Coding agents in my experience alert you to this, which is good. I pasted what was temporary token I made into Claude, just to test something, and after it had done the task it said something like, "you gave me a live token to work with in the chat, I'd advise you to treat that as exposed and rotate it."

Re:Fireworks AI incident impacts Notion and their customers by marcindulak on Tuesday November 10, 2026 @10:16AM (#50441578)
Claude itself tends to store secrets plaintext on disk, discussed 2 days ago https://news.ycombinator.com/item?id=50407882
Re:Fireworks AI incident impacts Notion and their customers by eitally on Tuesday November 10, 2026 @11:16AM (#50442434)
I had a similar experience yesterday with Argon (in Antigravity), but unfortunately it didn't come up until I explicitly asked it for a security audit. It had previously stored a secret API key in plain text [because it thought it made local testing easier], and didn't warn me before I'd committed to GitHub and deployed to Vercel. So, 50/50 but I've still added a note in a skill file to never do this again.
Re:Fireworks AI incident impacts Notion and their customers by keybored on Tuesday November 10, 2026 @09:50AM (#50441185)
That’s like leaving your phone in the public square. You should expect that it could get stolen. But Mike’s friend can’t go “well to be fair...” when Mike steals it.
Re:Fireworks AI incident impacts Notion and their customers by YetAnotherNick on Tuesday November 10, 2026 @11:35AM (#50442702)
This seems like terrible PSA. Why would I think that it is compromised.
Re:Fireworks AI incident impacts Notion and their customers by chinathrow on Tuesday November 10, 2026 @06:08AM (#50438648)
Yes, and they won't let admins see it either. It's insane.
Re:Fireworks AI incident impacts Notion and their customers by xtiansimon on Tuesday November 10, 2026 @07:30AM (#50439398)
> "unattributable Notion AI chat transcripts"

Who is using Notion for a chat about the weather? It's chats about your content and data.

Re:Fireworks AI incident impacts Notion and their customers by skeeter2020 on Tuesday November 10, 2026 @08:55AM (#50440413)
my initial thought too; even if your chat is cursory or OT it still contains lots of PII adjacent information
Re:Fireworks AI incident impacts Notion and their customers by htrp on Tuesday November 10, 2026 @10:27AM (#50441732)
sounds like someone just read the inference container logstream and didn't implement wide logs