News for hackers. Stuff that matters.

A comment on Claude Code slyly adding users' emails to outbound HTTP.

Re:Claude Code slyly adding users' emails to outbound HTTP by dear-leader on Monday October 26, 2026 @12:50AM (#50239272)
I actually had this happen to me just last week. Claude let me know about it and blamed it on a sub agent, saying something to the effect of “This was my bad. I explicitly told them not to do this and one agent did it anyway. I should have checked their commands but I didn’t.”

Claude then saved a note not to do this to memory, which gives me absolutely no faith that it won’t happen again.

[ Parent | on HN ]
Re:Claude Code slyly adding users' emails to outbound HTTP by ptkachykby on Wednesday October 28, 2026 @12:04PM (#50275915)
One more thing that could help: memory is only context for Claude Code, so use a PreToolUse hook that blocks the command itself.

A hard part is that the hook blocks only 1 command and does not carry the reason to the next session.

On Substrate there is also 1 memory outside of any agents, where every fact has a source.

Did the saved note appear in the next session? https://trysubstrate.co/l/a3hn

[ Parent | on HN ]