News for hackers. Stuff that matters.

A comment on Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files. Parent comment

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by SV_BubbleTime on Saturday November 07, 2026 @08:26PM (#50409702)
Oh no, I moved all that manual tedious boring loser mentality stuff to the agent. Now Claude does it for me, and no strangely enough Claude didn’t tell me there was a problem!
[ Parent | on HN ]
Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by weird-eye-issue on Saturday November 07, 2026 @10:02PM (#50410069)
In these cases they probably just blindly committed everything themselves, if you asked Claude to review the uncommitted changes and do the commit itself it probably would have flagged this.
[ Parent | on HN ]
Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by fwip on Sunday November 08, 2026 @12:37AM (#50410709)
> Often Claude commits the file itself. In 539 of the 1,105 repos with a real secret that we traced, a commit co-authored by Claude changed the file. Those commits name every recent model, from Sonnet 4.5 to Opus 5.5.

What do you make of that part of the article?

[ Parent | on HN ]
Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by weird-eye-issue on Sunday November 08, 2026 @02:21AM (#50411128)
Like I said in my comment that you replied to they likely flagged it and then the user just told it to continue anyways.
[ Parent | on HN ]