Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by binarymax on Saturday November 07, 2026 @04:55PM (#50408405)

I keep all my creds in a password manager (1Password in my case) and Claude can’t see them - when a cred is needed it runs a script that calls the op CLI and I tap my fingerprint for access. Sometimes I need to do it a bunch of times for complex operations, but it’s worth it.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by oefrha on Saturday November 07, 2026 @07:16PM (#50409339)

I refuse to use op cli because of the absolutely bunkers security model that’s a wontfix:

https://news.ycombinator.com/item?id=45478553

https://codeberg.org/manchicken/1password-cli-vuln-disclosur...

Risk of exposing a single credential is nothing compared to the risk of exposing everything through op cli’s expected behavior. Has there been any improvement on this?

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by chamomeal on Sunday November 08, 2026 @06:05AM (#50412217)

I think I remember a Bitwarden CLI supply chain vulnerability a few months ago?

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by z0al on Saturday November 07, 2026 @07:48PM (#50409503)

https://news.ycombinator.com/item?id=50365442

[ Parent | on HN ]