Claude Code sends your email address to websites

Posted by motoroco 1 day ago

Claude Code sends your email address to websites(github.com)

1553 points | 493 commentspage 8

kebman 17 hours ago|

Oh, well at least it doesn't go several levels deep into your password manager expressly to check your VISA credentials like Codex did to me the other day...

00deadbeef 15 hours ago|

Why did you give an LLM access to your password manager?

pneumic 10 hours ago||

Is it time to confront frontier lab harnesses’ bloat, token wastage, abuse of the user’s $HOME, mangling of XDG standards, and crimes against mixing configuration with state yet?

tomsonj 1 day ago||

pretty literal interpretation of User-Agent

ozozozd 22 hours ago||

Is Claude Code what Outlook/MSN was already?

I have trouble taking people seriously when I see them using Claude Code. Unless they are non-technical.

rmunn 22 hours ago|

Tell me, if you know (it's okay if you don't): does Anthropic still forbid you from using other harnesses if you are on a subscription plan? Or have they rescinded that and I never found out? Because if that ban is still in effect, there are plenty of people who don't have a choice about using Claude Code. (Other than giving up the subsidized subscription and paying API prices, which would blow through many people's budget in short order).

ozozozd 20 hours ago||

If they are forced to use Claude at work, that’s a different story.

But if they are paying Anthropic to be subjected to this treatment, they should work on self-respect.

I canceled my ChatGPT sub for a bit and used Claude instead, when Altman first sided with Trump.

But then I realized self-righteous, self-appointed morality police scares me more than opportunistic capitalist. Well, they also leaked their code. Who leaks their code?

TekMol 18 hours ago||

So the only sane way to use Claude Code is to sign up with an anonymous throwaway email?

That seems rather cumbersome.

How does everyone go about this?

What is an email provider that is trustworthy and does not want your phone number or credit card, so the email is not tied to you?

sreekanth850 23 hours ago||

>> To clarify, nobody implemented this "share email addresses to websites" as a feature. Models can be highly unpredictable. This is why deterministic checks around model behavior are so important, and why we need to solve alignment.

It seems all humans behave like agents. They even dont care about anything.

ozozozd 20 hours ago|

Of course they did. What a load of bs.

How did the model get access to the email? The harness gave it to the model.

They may have vibecoded it. No one put a gun to their head though. Still their responsibility.

sreekanth850 19 hours ago||

they already published a blog saying 100% agentic coding without any human review.

ozozozd 19 hours ago||

Cows have agency. If your cows get out on the road and hit someone’s car, or hurt a child, do you get to disclaim responsibility? Should you?

Also, the github issue admits that they put the user’s email in the context.

thatonehack 1 day ago||

Why can’t AI eliminate spam email? It is so powerful it should pulverize all spam email and spam phone calls! Yet… we get more.

lbanchio 12 hours ago||

Well, seems the major proven risk of AI is not destroying the world, but foolishly exposing our data :)

anon5739483 18 hours ago||

People will provide full name, email, credit card number, phone number, ID photo (front/back), biometric data and then complain about privacy. Sure way to become permanent underclass.

rcr-anti 1 day ago|

Yeah saw this behavior sometimes. Was fetching some public records from government websites and Claude decided to include my email in the user agent field. Of course, the orchestrator agent said it shouldn't have happened so it's ok.

More comments...