News for hackers. Stuff that matters.

A comment on Claude Cowork Exfiltrates Files. Parent comment

Re:Claude Cowork Exfiltrates Files by lanfeust6 on Wednesday January 14, 2026 @05:10PM (#46624428)
Could this not lead to a penalty on the github account used to post it?
[ Parent | on HN ]
Re:Claude Cowork Exfiltrates Files by bigfatkitten on Wednesday January 14, 2026 @05:32PM (#46624771)
No, because people push their own keys to source repos every day.
[ Parent | on HN ]
Re:Claude Cowork Exfiltrates Files by lanfeust6 on Wednesday January 14, 2026 @05:33PM (#46624801)
Including keys associated with nefarious acts?
[ Parent | on HN ]
Re:Claude Cowork Exfiltrates Files by edoceo on Wednesday January 14, 2026 @08:36PM (#46626759)
Maybe, the point is that people, in general, commit/post all kinds of secrets they shouldn't into GitHub. Secrets they own, shared secrets, secrets they found, secrets they don't known, etc.

GitHub and their partners just see a secret and trigger the oops-a-wild-secret-has-appeared action.

[ Parent | on HN ]