Top
Best
New

Posted by motoroco 20 hours ago

Claude Code sends your email address to websites(github.com)
1506 points | 471 commentspage 3
n0on3 10 hours ago|
You can patch things and remove stuff from context nine ways to Sunday, the underlying problem will still be there.

Maybe we need a new benchmark on how good models are at "keeping an eye" to if what they are about to do that doesn't come from a direct user instruction checks out with common sense plus user preferences. And we probably need a portable mechanism for users to manage such preferences (because we know instructions are not going to cut it, do we?).

zzril 10 hours ago|
How to define "common sense"? If programming is modelling real-world domains in code/logic, then modelling "common sense" might be the hardest programming task of them all.
n0on3 9 hours ago||
I didn’t mean to imply it would be easy, quite the opposite: there’s probably no optimal general solution for it (hence the need for user prefs). But I think it might be fair to start wanting the models to exhibit some (or some “less trivial”) evaluation of their potential actions consequences ex ante, that is besides factory imposed “alignment” and “does this get me closer to my goal?”.

I mean, the answer to “Is sending the user’s email address along with a web request to a third party requesting it, without the user’s explicit authorization, a good idea?” should easily be “no” …right?

rconti 20 hours ago||
Seems trading autonomy for machine speed means that sometimes the machines guess wrong.

I'm often surprised how correctly Claude guesses on my behalf, when my instructions are ambiguous. But it's not 100%.

O_H_E 17 hours ago||
Given the seemingly reasonable answer in the comments about it sending that info in the headers when the websites require it for data access, it sheds a light on a reoccurring pain point, that is usually viewed positively when thinking about "agentic coding". Namely, task persistence.

It is a continuous fight in markdown guidance files to try to convince the models to refer back to the human in order to resolve ambiguities or important decisions like those. They've been RLed to hell and back for "safe" task completion and not "prematurely" stopping (which was an earlier failure mechanism). Which is useful and we've bore its fruits recently, but not without drawbacks.

teruakohatu 20 hours ago||
This is insane, and if the org I work for bans Claude as a result I will not be the least surprised. Goodbye Claude Code.
TZubiri 20 hours ago|
You guys are still using these things? I may be ahead of the curve here.
vips7L 19 hours ago|||
Never have.
meowface 19 hours ago|||
I'd be shocked if a single org goes backwards and decides "okay, let's remove the LLM agent systems we asked everyone to use".

Organizations may switch harnesses and may even switch providers, but LLM adoption is only going to monotonically increase. This dumb behavior is not some intrinsic property, and the models are getting smarter and more useful every ~4 months.

xpct 9 hours ago|||
I think there's potential for building orgs with limited exposure to LLMs, I'm not entirely convinced every type of product development only accelerates from their use.

Not that I could say what those would be, just throwing it out there.

meowface 6 hours ago||
I don't think so. Some products and orgs will in fact go backwards more than they go forwards (chimps with AK-47s, etc.), but anyone wielding the current and future generations of agents wisely will always be capable of getting net-positive results. And it's increasingly easy to become capable of it.

Probably the big divide will be orgs who use agents for more or less of the ideation/design/architecture proposal side of things. Giant Confluence sloppages/Google slopdocs vs. 100% human-written proposals. But the actual implementation and testing? Going forward, no reason to not have that be almost entirely LLMs.

(Plus, in a few generations we should expect the frontier LLMs to no longer produce garbage-to-mediocre proposals, and in fact to generally outshine human engineers and architects and researchers at the ideation phase. Whether that takes one year or five, who knows.)

xpct 4 hours ago||
I'm a bit surprised you're willing to take this strong position. There's plenty of businesses out there that already have a limited exposure to technology and employ less tech-savvy or older people, and still make profit.

Unless we're at singularity, there's likely to be an entire cohort of people unwilling to work in LLM shops, and there's business value to capture them.

soon_to_be_sb 18 hours ago||||
> LLM adoption is only going to monotonically increase

Yes, but the question is "what kind of adoption"? The kind that just unleashes it, or the kind that put it on a short leash.

infamouscow 3 hours ago|||
Exactly. Here's how that meeting went between security, compliance, legal, and CTO went:

security: zomg this is existentially bad we are leaking our fn'ing emails!11!

compliance: can we mitigate this problem?

legal: what can we do here?

CTO: don't care, we're not losing all this productivity because our emails are being leaked, have a good day

vips7L 2 hours ago||
“productivity”
demegire 6 hours ago||
Claude Code and other agents typically do this when a site asks for mail in User Agent like SEC or Wiki Media. We did a full write up about it here: https://tin.computer/blog/claude-code-email-user-agent
msp26 19 hours ago||
I have no idea why they decided injecting my email into the model's context was a useful thing to do without any config option.
dannyw 14 hours ago|
Perhaps so it can push responsibility for actions on the user, not Claude or Anthropic; and then their privacy/trust team realised this was not a good idea.
Ramakrishna1967 4 hours ago||
Explicit permission is usually one yes button , approve once, then everything after is silent.Per-capability grants and re-asking on risky actions jusk make the failure visible.
literallyroy 18 hours ago||
Am I understanding the Contributor right that they mean this feature was dreamt up, implemented and approved with no human oversight? With auto updates to tons of developer machines?
ricardobeat 18 hours ago|
It looks like this is required by the HTTP spec: https://httpwg.org/specs/rfc9110.html#field.from
Tyr42 18 hours ago||
A user agent SHOULD NOT send a From header field without explicit configuration by the user, since that might conflict with the user's privacy interests or their site's security policy.
nialse 17 hours ago||
You might want to clarify that you are quoting the referenced standard so it doesn’t read like an opinion.
hobo123 12 hours ago|||
Why not both?

The word "agent" implies that they should _only_ act on your behalf.

Tyr42 4 hours ago|||
Ah I thought the SUPER CAPS was a dead giveaway.
phreack 1 hour ago||
This problem is the very reason I stopped using Claude months ago. The gaslighting about it being noticed just now is baffling. There's tickets and articles[0] about this from at least July.

[0] https://www.ayush.digital/blog/the-memory-heist

hk1337 19 hours ago|
I used a masked email with Claude and haven’t had anything but Claude emails from it.
More comments...