Stolen auth. Drains $200 Codex Subscription; User Scrambles to Revoke Access
_Toni_O · reddit · 2026-09-23
A Reddit user says someone copied the auth. credential file from a shared work laptop after a device-code login and has been draining their $200/month Codex subscription, with logs proving the usage wasn't theirs. They're asking how to revoke all access and re-secure the account — highlighting the security risk of file-based auth on shared machines.
More from coding & agent
- Turing Institute launches £2m programme and agentic AI behavioural assurance briefing — turinginst · 2026-09-23
- OpenRouter Batch API spans 71 models, auto-routes to cheapest provider — jeff_weinstein · 2026-09-23
- Cap sub-agents with fixed turn and time limits to force real prioritization — RexDouglass · 2026-09-23
- StackBlitz open-sources Bolt Slides: agents build presentations that are live web apps — tom_doerr · 2026-09-23
- User runs fully automated SEO with an AI agent: one new page daily, shipped via PR — ayushtweetshere · 2026-09-23
- Grok Build tests Remote Control to run your PC from phone, hinting at a Grok desktop app — testingcatalog · 2026-09-23