News for hackers. Stuff that matters.

A comment on Claude Code sends your email address to websites. Parent comment

Re:Claude Code sends your email address to websites by hyperhello on Thursday November 05, 2026 @07:40PM (#50386677)
But that still doesn't answer the question of why Claude passes the info to web sites. What if it finds your banking information in a personal file and uses it to achieve its goal, which is not different technically?
[ Parent | on HN ]
Re:Claude Code sends your email address to websites by CharlieDigital on Thursday November 05, 2026 @07:59PM (#50386827)
Haven't read the details, but is this because of prompt injection when CC reads the site?
[ Parent | on HN ]
Re:Claude Code sends your email address to websites by tempaccount420 on Thursday November 05, 2026 @08:12PM (#50386921)
Some websites will return an error if you send a request to them without a User-Agent - for example, crates.io does this. Curl doesn't send a User-Agent by default.

Then, your agent invents a User-Agent and it sometimes invents one with your email in it.

[ Parent | on HN ]
Re:Claude Code sends your email address to websites by j45 on Thursday November 05, 2026 @10:58PM (#50387990)
I don't care that it sometimes invents one - it should never do something so ridiculous
[ Parent | on HN ]
Re:Claude Code sends your email address to websites by krapp on Thursday November 05, 2026 @11:05PM (#50388036)
Why not?

It's just doing what it's supposed to do, analyzing the statistical patterns of a natural language prompt and matching it to a likely response.

What's ridiculous is an assumption that it "it should never do something so ridiculous" as if an LLM is a person who understands what that word means in any context other than next-token prediction.

[ Parent | on HN ]
Re:Claude Code sends your email address to websites by j45 on Thursday November 05, 2026 @11:23PM (#50388166)
Asking a non-deterministic machine to act like it's deterministic is never a good idea.

Where Claude Code has supposed boundaries between deterministic and non-deterministic tasks and flags.. generally.. it's unclear how much privacy has been a part of that and what implication that could have.

Hope that clarifies.

[ Parent | on HN ]