Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by kstenerud on Saturday November 07, 2026 @11:47PM (#50410487)

You could in theory fully review Claude Code.

But even that wouldn't be enough because LLMs are nondeterministic, and these kinds of issues are the inevitable results.

Only a mechanical, deterministic failsafe can protect you from it.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by what on Sunday November 08, 2026 @12:51AM (#50410762)

> You could in theory fully review Claude Code.

Can you point me to the CC source code?

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by kstenerud on Sunday November 08, 2026 @01:03AM (#50410819)

The CC source code leak was contained many months ago. But Claude is perfectly happy to decompile its own code if you ask the right way. It'll even patch the binary for you.

Regardless, It's kinda silly to keep the harness code hidden. There aren't any valuable secrets in there.

But there are rules & procedures to follow, so...

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by what on Sunday November 08, 2026 @01:11AM (#50410851)

Well then I have to use Claude before being able to review the source? Bit of a chicken and egg situation.

I also have to trust its “decompilation” is accurate.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by kstenerud on Sunday November 08, 2026 @01:19AM (#50410888)

You're absolutely right! There's no way around this problem — and no amount of creative thought could ever solve it.

All hail the agent!

[ Parent | on HN ]