Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by saidnooneever on Sunday November 08, 2026 @03:09AM (#50411328)

please dont forget basic operational security when using LLMs. they dont do everything for you. you can ask them to do all sorts of stuff, that doesnt mean you should.

secrets, encryption, publishing to public internet, scanning for vulnerabilities in your packages etc. etc. you need to take your own responsibility for and never rely on some bot automation or third party.

that includes if its important projects not relying on scanning tools but opening files yourself and verifying what's in there.

read things before you put them in a place where everyone can see them forever....

this is basic stuff. you guys did it beforen LLMs surely.

YOU are responsible. not Claude.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by citrin_ru on Sunday November 08, 2026 @03:26AM (#50411404)

The problem is LLMs marketed as a replacement for professionals (who know something about OpSec among other stuff). Internet is full of stories about apps vibecoded by people without IT background. They would not even understand what’s the problem here, for them it’s all magic.

[ Parent | on HN ]