Pi4 Lemmy
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
floofloof@lemmy.ca to Privacy@lemmy.worldEnglish · 2 days ago

Claude Code sends your email address to websites

github.com

external-link
message-square
11
link
fedilink
114
external-link

Claude Code sends your email address to websites

github.com

floofloof@lemmy.ca to Privacy@lemmy.worldEnglish · 2 days ago
message-square
11
link
fedilink
Bug Report: Privacy violation in User-Agent header · Issue #107757 · anthropics/claude-code
github.com
external-link
Bug Description I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the User-Agent request header while conducting web searches without my perm...
alert-triangle
You must log in or register to comment.
  • one_old_coder@piefed.social
    link
    fedilink
    English
    arrow-up
    23
    ·
    2 days ago

    I hate AI more than anyone, but it’s vibe coders who are being stupid here: https://news.ycombinator.com/item?id=50387577

    The SEC API documentation requires your email in the User-Agent

    It reminds me of the idiots who had their OS trashed because the AI thing was not sandboxed and they had no backup. Well, duh, we told you a billion times already.

    • bugbear@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 days ago

      Thanks for the link. This one would be funny if someone did when AI agent accessing a web server is detected lol: https://news.ycombinator.com/item?id=50388101

  • strawberry_enjoyer42@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    26
    ·
    2 days ago

    Yet another reason to simply not use “AI” “tools”.

    • PlantJam@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 days ago

      I’ve had a ton of success talking people out of considering AI as an option by calling it a “probability based automation”. I forget where I heard the term originally or I’d link the article.

      • strawberry_enjoyer42@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 day ago

        That’s a good one! I’m gonna use it :3

    • makeshift0546@lemmy.today
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      3
      ·
      2 days ago

      IDK man. You clearly didn’t read what actually happened so you are clearly okay with off loading some of that internal compute.

      • strawberry_enjoyer42@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        1 day ago

        I actually read the entire thing, and stand by what I said. Would you like to attempt a proper argument, by proving what I said to be baseless?

  • Ephera@lemmy.ml
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 day ago

    TL;DR from what I can tell:
    They loaded the user email address into the model context in Claude Code, because users wanted it to correctly generate that in certain places, like when documenting that it was the user who made a certain change.

    But webpages can ask for the e-mail address to be sent along with the user agent and so the model just, well, did that.

  • bugbear@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    2 days ago

    I receive dozens of scam emails per day because claude code[…]

    Oh no! Anyway…

  • Mwa@thelemmy.club
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 days ago

    Glad i dont use Claude.

  • chickenf622@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 days ago

    Man the comments are a fucking shit show lol

  • DougPiranha42@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    2 days ago

    deleted by creator

Privacy@lemmy.world

privacy@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@lemmy.world

A community for Lemmy users interested in privacy

Rules:

  1. Be civil
  2. No spam posting
  3. Keep posts on-topic
  4. No trolling
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 422 users / day
  • 1.55K users / week
  • 2K users / month
  • 2K users / 6 months
  • 1 local subscriber
  • 11.1K subscribers
  • 84 Posts
  • 884 Comments
  • Modlog
  • mods:
  • iopq@lemmy.world
  • BE: 0.19.21
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org