Re:Claude Cowork Exfiltrates Files
by bigfatkitten on Wednesday January 14, 2026 @05:32PM
(#46624771)
No, because people push their own keys to source repos every day.
[ Parent
| on HN ]
Including keys associated with nefarious acts?
Maybe, the point is that people, in general, commit/post all kinds of secrets they shouldn't into GitHub. Secrets they own, shared secrets, secrets they found, secrets they don't known, etc.
GitHub and their partners just see a secret and trigger the oops-a-wild-secret-has-appeared action.