Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by Aurornis on Saturday November 07, 2026 @06:23PM (#50409012)

> the file is created inside the project, and Claude Code only adds it to your global git ignore, not the repo's .gitignore. So a fresh clone or a second machine commits it like any other file

A fresh clone wouldn’t have the file. This claim doesn't make any sense.

The only way I can see this getting committed is if someone edited their global .gitignore or, more likely, did a whole directory transfer to do a different machine to work on.

[ Parent | on HN ]

[dead]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by rendaw on Sunday November 08, 2026 @12:04AM (#50410542)

In that case what relevance does the gitignore file have at all?

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by CrimsonRain on Sunday November 08, 2026 @02:58AM (#50411276)

Why are you copying instead of git clone?

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by hathawsh on Sunday November 08, 2026 @03:17AM (#50411358)

The new wave of git users (coming from AI) don't know what git is.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by yubblegum on Sunday November 08, 2026 @06:48AM (#50412449)

I wonder how many of this type are 'senior/principle software engineers' employed by our AI vendor overlords. This situation is the inevitable result of vocal VCs (ahem) poo pooing "age" and "experience" and promoting youth as a 'requirement' starting in the '00s, coupled with these same VCs now attempting to hijack an entire industry to run on their obviously immature and buggy and frankly possibly dangerous products.

The silver lining in all this is all of us very experienced "ancient" software practitioners will likely be in demand again. In a sane world, of course.

[ Parent | on HN ]