Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by cassianoleal on Saturday November 07, 2026 @04:56PM (#50408409)

It's a disgrace that the parent comment was flagged. My vouching has undone that but it's likely to be flagged again.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by Aurornis on Saturday November 07, 2026 @05:01PM (#50408459)

All of their comments were auto flagged from the moment they were posted. Must have triggered an LLM detector or spam detector.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by kragen on Saturday November 07, 2026 @06:22PM (#50409006)

It's AI slop. If what it says is actually true, hopefully a human will post it.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by nightpool on Sunday November 08, 2026 @01:54AM (#50411022)

It's fully AI generated. Please don't vouch for comments that don't have human input, it's against the rules:

> Don't post generated text or AI-edited text. HN is for conversation between humans.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by cassianoleal on Sunday November 08, 2026 @07:15AM (#50412602)

> It's fully AI generated

How have you determined that?

Furthermore, I have also noticed the error. I can still see it happening. Sandboxed agent, no access to global git ignore. Creates a new one after putting the secret in `.claude`. Same developer, same machine, fresh sandbox. No access to the original sandbox's global gitignore. Secret already on the project. Commit and push. Secret leaked.

[ Parent | on HN ]