alt Hacker NewsThat is just so disgusting. So happy I switched away from Anthropic.
For the record, I just asked Astra to verify that Codex does NOT do this, and it doesn't. Thanks for not screwing this up, OpenAI.
> I checked your installed Codex CLI 0.159.0, using your existing configuration.
> Its reported User-Agent contains the client/version, OS/architecture, and terminal—no email address.
Astra wasn't able to check OpenAI’s "hosted search service" though, whatever that is.
Replies
I would not recommend of getting in the habit of just trusting that.
"For the record, I just asked Astra to verify that Codex does NOT do this, and it doesn't. Thanks for not screwing this up, OpenAI."
You asked it to verify it doesn’t do this? That allayed your fears?
доверяй, но проверяй
Why not find out the truth instead of putting a hallucinating probability box in between you and the truth.
One way would be to fire up a little web server locally, have the agent make a request to it, then check the logs.
As long as the email is in the context, which it is IIRC, it can totally decide to run curl –H 'User-Agent: <your email blah blah>'. You need to have a pretty poor understanding of LLMs to think this is a deterministic problem of reading user agent builder source code. Unless you found explicit filter code that blocks the behavior, that is. LLM info leaks to third parties mostly aren’t deterministically coded behavior.
Edit: I’m not completely sure if Codex injects email into system prompt (not at the computer, can’t check, but IIRC the model does know my org domain), but even if it doesn’t, it will be in the context as soon as it makes a git commit anyway.