Last week OpenCode was hit with a huge RCE / prompt injection CVE - here's a deep dive exploration of what happened, how it worked, and the impact.
Now more than ever, we need agent telemetry.
johncodes.com/archive/2026...
Now more than ever, we need agent telemetry.
johncodes.com/archive/2026...
all your OpenCodes belong to us
all your OpenCodes belong to us
johncodes.com
January 19, 2026 at 2:24 AM
Last week OpenCode was hit with a huge RCE / prompt injection CVE - here's a deep dive exploration of what happened, how it worked, and the impact.
Now more than ever, we need agent telemetry.
johncodes.com/archive/2026...
Now more than ever, we need agent telemetry.
johncodes.com/archive/2026...
the opencode problem I have is that it's mem usage ain't so bad, and I can have multiple sessions going… yay.
but: each opencode can only handle one project, afaik. so, many opencodes.
but: each opencode can only handle one project, afaik. so, many opencodes.
March 11, 2026 at 7:16 AM
the opencode problem I have is that it's mem usage ain't so bad, and I can have multiple sessions going… yay.
but: each opencode can only handle one project, afaik. so, many opencodes.
but: each opencode can only handle one project, afaik. so, many opencodes.
Why are all the sandbox examples "run opencode in a sandbox"? Then I end up with many opencodes. I want to run one opencode / pi / etc and give the agent access to a sandbox
modal.com/docs/example...
modal.com/docs/example...
Run OpenCode in a Modal Sandbox
This example demonstrates how to run OpenCode remotely and connect to it from your local terminal or browser.
modal.com
August 14, 2026 at 6:40 PM
Why are all the sandbox examples "run opencode in a sandbox"? Then I end up with many opencodes. I want to run one opencode / pi / etc and give the agent access to a sandbox
modal.com/docs/example...
modal.com/docs/example...
forgetting that sometimes it's tmux that just wont scale.
especially with so so so many opencodes all running TUI loops. that don't peacefully idle nice.
bah humbug. maybe but i doubt, opencode v2 might fix this. there's mini. i should try mini.
especially with so so so many opencodes all running TUI loops. that don't peacefully idle nice.
bah humbug. maybe but i doubt, opencode v2 might fix this. there's mini. i should try mini.
August 6, 2026 at 5:40 AM
forgetting that sometimes it's tmux that just wont scale.
especially with so so so many opencodes all running TUI loops. that don't peacefully idle nice.
bah humbug. maybe but i doubt, opencode v2 might fix this. there's mini. i should try mini.
especially with so so so many opencodes all running TUI loops. that don't peacefully idle nice.
bah humbug. maybe but i doubt, opencode v2 might fix this. there's mini. i should try mini.
Haven't closed the loop & sent data in to opencodes much (have some wip though), but I do have exp2span to turn opencode exports into traces/spans & a somewhat more neglected opencode plugin to act as a live exporter.
tangled.org/jauntywk.bsk...
tangled.org/jauntywk.bsk...
tangled.org/jauntywk.bsk...
tangled.org/jauntywk.bsk...
jauntywk.bsky.social/exp2span
Convert opencode transcripts to otel (or agent) traces
tangled.org
March 5, 2026 at 2:34 AM
Haven't closed the loop & sent data in to opencodes much (have some wip though), but I do have exp2span to turn opencode exports into traces/spans & a somewhat more neglected opencode plugin to act as a live exporter.
tangled.org/jauntywk.bsk...
tangled.org/jauntywk.bsk...
tangled.org/jauntywk.bsk...
tangled.org/jauntywk.bsk...
Swapfile4 engage.
This is the most bonkers ridiculous payoff for years of compfuzor praxis of supporting multiple instances of things. To keep adding new swaps.
To keep running more opencodes.
This is the most bonkers ridiculous payoff for years of compfuzor praxis of supporting multiple instances of things. To keep adding new swaps.
To keep running more opencodes.
February 19, 2026 at 7:58 AM
Swapfile4 engage.
This is the most bonkers ridiculous payoff for years of compfuzor praxis of supporting multiple instances of things. To keep adding new swaps.
To keep running more opencodes.
This is the most bonkers ridiculous payoff for years of compfuzor praxis of supporting multiple instances of things. To keep adding new swaps.
To keep running more opencodes.
no i lost work, i had ~5 prompts i was trying to issue, gone now, forgot to back them up. before very slowly kill all'ing the opencodes all.
spot of bother.
spot of bother.
August 13, 2026 at 9:43 PM
no i lost work, i had ~5 prompts i was trying to issue, gone now, forgot to back them up. before very slowly kill all'ing the opencodes all.
spot of bother.
spot of bother.
bro for real
(to be fair it was mostly staying under 10% but i also saw it chugging 50% for a bit there! during some high swap time?? wut??)
(to be fair it was mostly staying under 10% but i also saw it chugging 50% for a bit there! during some high swap time?? wut??)
August 6, 2026 at 6:56 AM
bro for real
(to be fair it was mostly staying under 10% but i also saw it chugging 50% for a bit there! during some high swap time?? wut??)
(to be fair it was mostly staying under 10% but i also saw it chugging 50% for a bit there! during some high swap time?? wut??)
i really gotta start launching opencodes into tmux window 1 or 2, giving myself some scratch space before it. 0 is also not super near-by a key.
July 1, 2026 at 3:22 PM
i really gotta start launching opencodes into tmux window 1 or 2, giving myself some scratch space before it. 0 is also not super near-by a key.
nothing super revolutionary here but enjoying the variety of comments.
would love to see some demos of how folks are running code forges with agents in them. opencodes just spawning to do various tasks in your forge sounds good!
would love to see some demos of how folks are running code forges with agents in them. opencodes just spawning to do various tasks in your forge sounds good!
June 16, 2026 at 9:33 PM
nothing super revolutionary here but enjoying the variety of comments.
would love to see some demos of how folks are running code forges with agents in them. opencodes just spawning to do various tasks in your forge sounds good!
would love to see some demos of how folks are running code forges with agents in them. opencodes just spawning to do various tasks in your forge sounds good!
I am not at all eager to change my workflow but keeping dozens of OpenCode processes open is wrecking my system memory.
I do want lots and lots of terminal windows open. But ideally as thin clients basically, to central opencodes.
I do want lots and lots of terminal windows open. But ideally as thin clients basically, to central opencodes.
February 17, 2026 at 8:39 AM
I am not at all eager to change my workflow but keeping dozens of OpenCode processes open is wrecking my system memory.
I do want lots and lots of terminal windows open. But ideally as thin clients basically, to central opencodes.
I do want lots and lots of terminal windows open. But ideally as thin clients basically, to central opencodes.
Been shopping for used laptops. Ideally with good pen input too, but mainly want some ok ram.
Added 36GB and yet another 36GB swap file to my system in the past two days. That's basically ok. Ridiculous but ok. 64GB desktop straining with nothing but many opencodes.
Added 36GB and yet another 36GB swap file to my system in the past two days. That's basically ok. Ridiculous but ok. 64GB desktop straining with nothing but many opencodes.
February 15, 2026 at 8:38 AM
Been shopping for used laptops. Ideally with good pen input too, but mainly want some ok ram.
Added 36GB and yet another 36GB swap file to my system in the past two days. That's basically ok. Ridiculous but ok. 64GB desktop straining with nothing but many opencodes.
Added 36GB and yet another 36GB swap file to my system in the past two days. That's basically ok. Ridiculous but ok. 64GB desktop straining with nothing but many opencodes.
Crud this really is the end. Terminal failure! I'd been holding out hope we'd eventually stop OOM'ing.
Almost nothing but opencodes, OpenCode on OpenCode on OpenCode. Endless tmux sessions with opencodes closed sitting there waiting to come back. Right up to them over the line.
Thanks for the run.
Almost nothing but opencodes, OpenCode on OpenCode on OpenCode. Endless tmux sessions with opencodes closed sitting there waiting to come back. Right up to them over the line.
Thanks for the run.
February 2, 2026 at 7:51 PM
Crud this really is the end. Terminal failure! I'd been holding out hope we'd eventually stop OOM'ing.
Almost nothing but opencodes, OpenCode on OpenCode on OpenCode. Endless tmux sessions with opencodes closed sitting there waiting to come back. Right up to them over the line.
Thanks for the run.
Almost nothing but opencodes, OpenCode on OpenCode on OpenCode. Endless tmux sessions with opencodes closed sitting there waiting to come back. Right up to them over the line.
Thanks for the run.
Kittys->tmuxes->opencodes->sessions.
This is gonna be fun.
This is gonna be fun.
January 7, 2026 at 10:18 AM
Kittys->tmuxes->opencodes->sessions.
This is gonna be fun.
This is gonna be fun.
Wir sind heute mit der Crew von @pionierfilm im @zkmkarlsruhe und drehen in der #OpenCodes Ausstellung. Inhalt ist natürlich streng geheim 😎
February 19, 2025 at 10:46 AM
Wir sind heute mit der Crew von @pionierfilm im @zkmkarlsruhe und drehen in der #OpenCodes Ausstellung. Inhalt ist natürlich streng geheim 😎
All your OpenCodes belong to us | Discussion
all your OpenCodes belong to us
all your OpenCodes belong to us
johncodes.com
January 19, 2026 at 4:20 AM
All your OpenCodes belong to us | Discussion
🏴☠️ all your OpenCodes belong to us
johncodes.com/archive/2026...
#opencode #rce #vibecoding #cybersecurity
johncodes.com/archive/2026...
#opencode #rce #vibecoding #cybersecurity
all your OpenCodes belong to us
all your OpenCodes belong to us
johncodes.com
January 19, 2026 at 11:00 AM
🏴☠️ all your OpenCodes belong to us
johncodes.com/archive/2026...
#opencode #rce #vibecoding #cybersecurity
johncodes.com/archive/2026...
#opencode #rce #vibecoding #cybersecurity
all your OpenCodes belong to us
💥 Read this insightful post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Recently, OpenCode, a very popular open source AI coding agent, was hit with a massive CVE which allowed for arbitrary remote code execution (RCE). If you’re unfamiliar with…
💥 Read this insightful post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Recently, OpenCode, a very popular open source AI coding agent, was hit with a massive CVE which allowed for arbitrary remote code execution (RCE). If you’re unfamiliar with…
all your OpenCodes belong to us
💥 Read this insightful post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Recently, OpenCode, a very popular open source AI coding agent, was hit with a massive CVE which allowed for arbitrary remote code execution (RCE). If you’re unfamiliar with cyber-security, penetration testing, red-teaming, or the murky world of building secure software, a RCE vulnerability is the type of thing that…
viralpique.com
January 19, 2026 at 4:50 AM
all your OpenCodes belong to us
💥 Read this insightful post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Recently, OpenCode, a very popular open source AI coding agent, was hit with a massive CVE which allowed for arbitrary remote code execution (RCE). If you’re unfamiliar with…
💥 Read this insightful post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Recently, OpenCode, a very popular open source AI coding agent, was hit with a massive CVE which allowed for arbitrary remote code execution (RCE). If you’re unfamiliar with…
All your OpenCodes belong to us
L: https://johncodes.com/archive/2026/01-18-all-your-opencodes/
C: https://news.ycombinator.com/item?id=46674424
posted on 2026.01.18 at 21:28:21 (c=0, p=5)
L: https://johncodes.com/archive/2026/01-18-all-your-opencodes/
C: https://news.ycombinator.com/item?id=46674424
posted on 2026.01.18 at 21:28:21 (c=0, p=5)
January 19, 2026 at 4:04 AM
All your OpenCodes belong to us
L: https://johncodes.com/archive/2026/01-18-all-your-opencodes/
C: https://news.ycombinator.com/item?id=46674424
posted on 2026.01.18 at 21:28:21 (c=0, p=5)
L: https://johncodes.com/archive/2026/01-18-all-your-opencodes/
C: https://news.ycombinator.com/item?id=46674424
posted on 2026.01.18 at 21:28:21 (c=0, p=5)
January 19, 2026 at 4:00 AM
All your OpenCodes belong to us https://johncodes.com/archive/2026/01-18-all-your-opencodes/ (https://news.ycombinator.com/item?id=46674424)
all your OpenCodes belong to us
all your OpenCodes belong to us
johncodes.com
January 19, 2026 at 5:16 AM
All your OpenCodes belong to us https://johncodes.com/archive/2026/01-18-all-your-opencodes/ (https://news.ycombinator.com/item?id=46674424)
this was not a joke it just started spattering out bs in the thinking and i quickly stopped it and switched from opencodes glm 5 to kilo gateaway glm 5 and it works again now ai is weird man
February 22, 2026 at 11:20 AM
this was not a joke it just started spattering out bs in the thinking and i quickly stopped it and switched from opencodes glm 5 to kilo gateaway glm 5 and it works again now ai is weird man
@thdxr https://x.com/thdxr/status/1987919932227534896 #x-thdxr
Quote: https://x.com/jarredsumner/status/1987773053972226412
opencodes /undo restores LLM fuckups - not super efficient but it works for most cases
ultimately git has the functionality to
- quickly ...
Quote: https://x.com/jarredsumner/status/1987773053972226412
opencodes /undo restores LLM fuckups - not super efficient but it works for most cases
ultimately git has the functionality to
- quickly ...
November 10, 2025 at 4:45 PM
@thdxr https://x.com/thdxr/status/1987919932227534896 #x-thdxr
Quote: https://x.com/jarredsumner/status/1987773053972226412
opencodes /undo restores LLM fuckups - not super efficient but it works for most cases
ultimately git has the functionality to
- quickly ...
Quote: https://x.com/jarredsumner/status/1987773053972226412
opencodes /undo restores LLM fuckups - not super efficient but it works for most cases
ultimately git has the functionality to
- quickly ...
@thdxr https://x.com/thdxr/status/1956540348362043582 #x-thdxr
we never properly designed opencodes non-interactive mode
what do you guys think about this - color will be added later
we never properly designed opencodes non-interactive mode
what do you guys think about this - color will be added later
August 16, 2025 at 2:30 AM
@thdxr https://x.com/thdxr/status/1956540348362043582 #x-thdxr
we never properly designed opencodes non-interactive mode
what do you guys think about this - color will be added later
we never properly designed opencodes non-interactive mode
what do you guys think about this - color will be added later