We got admin access to Baseten's production GitHub in 25 minutes

In one line

We gave Strix a domain. In 25 minutes, it found a live token with admin access to Baseten’s product, deployment, and CLI repos in a public Docker image.

Opening excerpt

We were about to trust Baseten with our own and our customers’ data. So to be safe, we ran Strix to ensure they were secure first. About 25 minutes later, it had a live GitHub token with repository-level admin rights on internal Baseten repos.

We build Strix , an autonomous hacking agent, which of course means we need (cheap and fast) inference. We were exploring our options, and Baseten is one of the obvious choices. It’s a great product, they’re valued at $13 billion , and a lot of serious companies depend on them.

But… we’re a security company. Before we give a third party our data, models, or code, we scan them. We would much rather find a problem and help get it fixed before we start depending on that service (we do this with almost all of our vendors and have a high rate of finding serious issues).

So… we pointed Strix at *.baseten.co and let it run without credentials or source code.

(Excerpted from the original; full article via the source link below.)

This story hit the Hacker News front page today (157 points / 71 comments, via strix.ai). Our Tech Radar aggregates daily signals on AI engineering, backend architecture and DevOps — browse the related services and further reading below, or get in touch with our team.