News for hackers. Stuff that matters.

A comment on Claude Code sends your email address to websites. Parent comment

Re:Claude Code sends your email address to websites by grey-area on Friday November 06, 2026 @02:47AM (#50389368)
From the doc, this suggestion is hardly satisfactory:

The sandbox covers shell commands only. Claude’s file tools, MCP servers, and hooks run outside it.

Also this is in my view the main job of a scaffold like claude code - to restrict what the agent can see and make sure it doesn't use info it should not. It's not something a user can easily or should have to attempt to control themselves.

[ Parent | on HN ]
Re:Claude Code sends your email address to websites by YetAnotherNick on Friday November 06, 2026 @07:48AM (#50391709)
File tools, by default asks permission to edit outside directory. There is no MCP tools or hooks by default and if you install it you need explicit permission to trust it.
[ Parent | on HN ]