Reverse-engineering Kiro-account-manager: AWS accounts and Claude distillation
Comments on “Reverse-engineering Kiro-account-manager: AWS accounts and Claude distillation”
Claim-checked. Scored by all three judges, and its checkable claims were compared with the sources it cites. How far stories are checked
Security researcher Hans Dekker reverse-engineered Kiro-account-manager, an open-source Electron tool that mass-creates free AWS Builder ID accounts by scripting signup over HTTP and forging Amazon's FWCIM anti-bot fingerprint, then pools them behind a local Claude-compatible proxy. He reports the fabricated values are inconsistent with real Chrome, and that shared exit IPs and email domains are costlier to hide. The market figures, such as 0.06× pricing and mention growth, are his own observations without cited sources.
Why it ranked
No. 14 of 109 with a score of 0.73. The panel rated it highest on technical depth (0.93) and new information (0.90), lowest on audience breadth (0.61). Placed No. 14, No. 8 by score alone: the sixth Security story of the day (−0.060). The placement terms move stories; they are not part of the score.
- AI judgeJudge 2claude-haiku-5-5
- Detailed technical reverse-engineering of a fraud tool farming AI account access, with concrete fingerprint inconsistencies and actionable detection advice; strong security and AI relevance.
- AI judgeJudge 3gpt-5.6-luna
- A deeply technical reverse-engineering report documents automated AWS account farming, fingerprint forgery, proxy pooling, resale, and concrete detection signals. It is highly actionable for AI-platform and abuse-defense teams, with code-level evidence and little promotional content.
Each judge wrote its line after answering the rubric, with the site and the author still hidden. Every answer behind this is in the table under Score.
Score
0.73total under rubric v2.3
- Significance0.65
- Reader interest0.86
- Audience breadth0.61
- Practical relevance0.73
- Substantiated0.86
- Technical depth0.93
- New information0.90
- Counts against: Promotional0.03
- Counts against: Overclaim0.17
Each judge’s answer per question (0–1), their mean and spread, and what the question adds to the score (weight × mean).
| Question | Judge 1 | Judge 2 | Judge 3 | Mean | Spread | Weight | Contribution (weight times mean) |
|---|---|---|---|---|---|---|---|
| SignificanceHow much does this change what people in tech know or can do? | 0.62 | 0.50 | 0.82 | 0.65 | 0.32 | +0.24 | +0.155 |
| Reader interestWould a well-informed senior engineer or tech founder want to read this today, and likely pass it on? | 0.78 | 0.85 | 0.95 | 0.86 | 0.17 | +0.26 | +0.224 |
| Audience breadthHow many people who build technology does it concern? | 0.59 | 0.60 | 0.64 | 0.61 | 0.05 | +0.13 | +0.079 |
| Practical relevanceHow useful is it to someone who builds software or tech products? | 0.74 | 0.60 | 0.86 | 0.73 | 0.26 | +0.22 | +0.162 |
| SubstantiatedHow well is it backed? Consider whether it is the primary source, and whether its main claims come with data, code, a demo, a reproducible method or citations. | 0.92 | 0.75 | 0.90 | 0.86 | 0.17 | +0.05 | +0.043 |
| Technical depthHow technically substantive is it? | 0.99 | 0.85 | 0.94 | 0.93 | 0.14 | +0.05 | +0.046 |
| New informationDoes it contain information absent from the stories covered in the last 7 days (list provided)? | 0.88 | 0.85 | 0.98 | 0.90 | 0.13 | +0.05 | +0.045 |
| PromotionalIs it mainly marketing with little substance (a press release, ad or sponsored post with no real information)? A launch post that carries real news is not promotional. | 0.04 | 0.03 | 0.01 | 0.03 | 0.03 | −0.19 | −0.005 |
| OverclaimDo the headline or conclusions claim more than the body supports? | 0.22 | 0.20 | 0.08 | 0.17 | 0.14 | −0.11 | −0.018 |
| Sum of contributions | +0.730 | ||||||
| Claim-check penalty | 0.000 | ||||||
| Total, as published | 0.730 | ||||||
Spread is the highest minus the lowest judge answer. marks a spread above 0.40: the judges disagree, and the story is marked contested.
The badge for this ranking, for the author's page or anyone's: one line of HTML, and it links back here.
<a href="https://rubric.hrih.si/editions/2026-11-06/14/"><img src="https://rubric.hrih.si/badge/2026-11-06/14.svg" alt="Ranked #14 on Rubric, 6 Nov 2026" width="238" height="28"></a>Claim check
Claim check: 3 matches source · 4 no source given · 1 couldn’t check. Each claim is compared with the source the article itself cites; a flag is published only when both checkers agree.
Matches sourceGeneralization
Anthropic has reported distillation campaigns against Claude that ran through fraudulent accounts and resold access.
The cited source says the same thing.
The article says “Anthropic has reported distillation campaigns against Claude that ran through fraudulent accounts and resold access”
The source says “To circumvent this, labs use commercial proxy services which resell access to Claude and other frontier AI models at scale”
Source cited by the article: anthropic.com/news/detecting-and-preventing-distillation-attacks
Couldn’t checkGeneralization
The US government has started treating model distillation as a national-security problem.
The source was unreachable, paywalled or too long, or the two checkers disagreed.
The article says “the US government has started treating it as a national-security problem”
The source says No passage could be compared.
Source cited by the article: whitehouse.gov/wp-content/uploads/2026/04/NSTM-4.pdf
Matches sourceCausal conclusion
Mass-created free accounts are resold as an API in an underground market of relays at a fraction of the official price.
The cited source says the same thing.
The article says “That access is resold as an API in an underground market of relays, at a fraction of the official price”
The source says “It is a grey economy of API proxies (commonly called “transfer stations,” 中转站) that lets Chinese developers access Anthropic’s models at as low as 10% of the official price”
Source cited by the article: chinatalk.media/p/how-to-buy-cheap-claude-tokens-in
Matches sourceNumber
On recent Chrome on Windows, the GPU string reported by the browser includes the card's hardware ID, such as (0x00002206).
The cited source says the same thing.
The article says “On recent Chrome on Windows, that string includes the card’s hardware ID, a short hex code like (0x00002206”
The source says “rendererString << mDescription; rendererString << " (" << gl::FmtHex(mAdapterDescription.DeviceId) << ")"; rendererString << " Direct3D11”
Source cited by the article: chromium.googlesource.com/angle/angle/+/refs/heads/main/src/libANGLE/renderer/d3d/d3d11/Renderer11.cpp
No source givenNumber
Kiro access is priced at 0.06× Anthropic's API rate by relay sellers in Chinese-language Telegram channels.
The article gives no link or citation for it.
The article says “1× is the official price and kiro runs at 0.06×”
The source says No source to compare with.
No source givenNumber
Mentions of kiro in the Telegram channels climbed from a few hundred a month in spring 2026 to tens of thousands a month by midsummer.
The article gives no link or citation for it.
The article says “mentions of kiro climbed from a few hundred a month in spring 2026 to tens of thousands a month by midsummer”
The source says No source to compare with.
No source givenNumber
Of the ten math-result options in the tool's pool, only one matches what Chrome's V8 returns for -1e300, and four are arithmetically impossible.
The article gives no link or citation for it.
The article says “I ran -1e300 through V8 and only the first row matched”
The source says No source to compare with.
No source givenNumber
The tool's GPU pool has twenty-two hardcoded strings, and twenty-one lack the hardware ID code.
The article gives no link or citation for it.
The article says “The tool picks its card from a pool of twenty-two hardcoded strings, and twenty-one of them have that code missing”
The source says No source to compare with.
Also covered by
No other coverage was clustered with this story.
Elsewhere
Elsewhere: HN 2 pts, not on front page
Recorded for context only, checked 6 Nov 2026, 05:47 UTC. It played no part in the ranking.