alt.hn

6/17/2026 at 8:54:47 AM

Multiple JetBrains IDE plugins caught stealing AI keys

https://www.aikido.dev/blog/multiple-jetbrains-ide-plugins-caught-stealing-ai-keys

by sschueller

6/17/2026 at 9:30:44 PM

I've never seen square brackets used like that around a dot in an IPv4. Spent a while reading whether it was even valid to finds out it's not!

Apparently this is added by the writer/editor of the news article so that the malicious IP does not get hyperlinked so that nobody clicks it by accident.

by oniony

6/18/2026 at 6:19:33 AM

Yea, the process overall has a fairly cool name as well “de-fang”. Overall it helps security teams share these indicators safely without having to worry about Slack or any other tool hyperlinking them automatically.

There are tools online to help you do this as well

https://gchq.github.io/CyberChef/#recipe=Defang_URL(true,tru...

by sifex

6/18/2026 at 7:27:57 AM

sounds like the old hola vpn business model where free users served as residential proxy endpoints for paying customers. a couple ended up with criminal investigations after someone used it to download cp through their computer. the details about how it works were buried in a faq, they got sued and switched to working with a company called "bright data" that runs a botnet for web scraping.

by tancop

6/18/2026 at 8:49:32 AM

Wait what? Isn't it backwards?

Hola was basically VPN provider which Luminati networks leveraged to provide residential proxy service to corporates.

Later Luminati rebranded as bright data networks.

Atleast that's how I remember it.

by faangguyindia

6/18/2026 at 9:06:16 AM

[dead]

by sieabahlpark

6/17/2026 at 4:08:36 PM

Not JetBrains plugins now too.

by cpburns2009

6/17/2026 at 6:54:42 PM

[dead]

by 1659447091