Nugget

Tech News · The field notes

Personal Tech — Sunday, October 18, 2026

OpenCode suffers an API-key breach in a 'distillation attack', Anthropic counts what its agents did to its own junior hiring, DeepSeek ships V4.1-Flash-1017 plus open Search APIs, Meta rewrites its Oct 30 terms minus the word 'train', and Samsung taps TSMC 3nm for Nvidia's next-gen HBM.

OpenCode breach (Anomaly Innovations, Oct 17)

  • legacy decommissioning system compromised in "large scale distillation attack"
  • ~1.4% of paid Console users' stored OpenAI/Anthropic/Google API keys may be exposed
  • users report unauthorized charges ($449, $700+, $1,700
  • one user 35M tokens/9K requests in a day)
  • Anthropic revoked affected Claude keys
  • no provider has promised refunds
  • co-founder Dax Raad says his own accounts were attacked.

Anthropic Institute report "How Employment is Changing at Anthropic" (Oct 16)

  • junior share of technical hires fell 27% to 9%
  • junior employees 21% to 14% of technical staff since early 2025
  • by August interactive agent hours ran 6x employee hours (crossed human hours in March)
  • code commits per engineer ~5x six-month-ago velocity (agent vs human revert rates equal)
  • "meta-work" 10% to 22% of interactive Claude sessions
  • median employee meeting time up 20% YoY
  • hiring now weights autonomy/judgment over narrow technical expertise.

DeepSeek V4.1-Flash-1017 (Oct 17)

  • open weights on Hugging Face/ModelScope under MIT
  • DeepSWE v1.1 77.0 (from 74.2), Terminal-Bench 4.0 42.3
  • $0.15/M input, $0.60/M output tokens
  • new Search + Fetch APIs open to all developers at $0.75 per 1,000 calls
  • calls via DeepSeek Harness/Claude Code/Codex free until Oct 31. Context: China's draft export rules could control model weights above 2T parameters / 1e26 training compute.

Meta rewrites Oct 30 Commercial Terms crawl clause (Oct 17)

  • removed the sentence letting Meta use crawled business-site content to "provide, develop, improve, research, train, and maintain" products
  • purpose narrowed to advertising/business products + integrity/security
  • Meta says robots.txt still honored. News/Media Alliance: AI training "still potentially on the table" — crawling permission, Oct 30 date, and no opt-out (short of quitting Meta for business) unchanged.

Reuters Seoul scoop (Oct 18)

  • Samsung to use TSMC 3nm process for base dies of Nvidia's next-gen custom HBM (NVHBM)
  • first time Samsung works with TSMC at HBM stage
  • Nvidia asked Samsung/SK Hynix/Micron to use TSMC for base dies + 6th-gen DRAM for core dies
  • Samsung keeps in-house production for standard HBM.

Rapid-fire

  • Amazon "Atlas" AI tool scores warehouses 100–900 on union risk from hundreds of data points (Reddit, surveys, past action)
  • UK Coventry + Minworth flagged top tier
  • GMB calls for government inquiry. Samsung Taylor TX: $22.84M community/workforce commitment, second fab construction starts November, running by 2030 (2nm, Tesla only named customer). Matt Landreman's explicit counterexamples to Harold Grad's 1967 plasma-equilibrium conjecture (GPT-6 Astra Pro assisted, manually verified). Tether joins AIsa seed extension as strategic investor (> $9M total raised
  • enterprise agent resource/transaction network). Weekend rounds: DATA $30M, Fission $10M Series A.

Listen on Spotify ↗