alt Hacker NewsI work on Claude Code. We're removing the account email address from the context Claude Code gives the model. This update will hit Claude Code users in the next release, which should arrive early next week. I'll share an update in this thread once it's out.
I'm sorry we let this happen. Users had reported Claude would hallucinate names for things like @author tags, since it didn't have context on the account. So we added the account email in the model's context for signed-in users. But when Claude wrote a command itself, like a curl call, it sometimes put your email address in the User-Agent as a contact address. Some sites ask agents for a contact, and Claude would sometimes provide the email address in its context.
Until the next release arrives, 2.1.317 and later have a built-in mod (on by default) that asks you before Claude runs a web tool call or a curl-style command containing your email (mpoteat covered it here: https://news.ycombinator.com/item?id=50386031). But it still doesn't prevent all cases, like when Claude writes a script and runs on its own. The stable channel is still on 2.1.311, so update to 2.1.317 or later.
Again, this should not have happened, and we should've caught this behavior earlier.
Replies
This issue was raised a few weeks ago and your official account said it was fixed about a week ago. But it’s not yet??
> I'm sorry we let this happen.
Lets not lie here. Only a misinformed idiot cares about you or your company being sorry. It doesn't fix the problem. And this particular problem should never have happened.
If it wasn't bad enough that adtech literally deanonymizes the internet, you're doing that for them for free. You people are literally insane if you ever thought it was acceptable to dirty contexts in this way.
> Users had reported Claude would hallucinate names for things like @author tags
That is not your problem. Your job (Anthropic's) is to provide a vanilla shell of a system that is default SAFE. I reserve the right to risk putting my keys, my email, or other personally identifying information into the system.
Every one of these failures makes me glad that I've got a backup plan for inference once this entire bubble pops. And if the election was any sign, you guys are screwed, I frankly support what's going on in politics even though I like the technology.
Tech industry has been a bad neighbor for years.
> this should not have happened, and we should've caught this behavior earlier.
Not a great look while you're simultaneously pushing the story that you and everyone else are shipping more lines of code than ever and "code is not the bottleneck".
Do you plan on publishing data on the rate of bugs, privacy issues and security issues introduced as you scale up AI-generated code vs human-written code?
You guys have 67 thousand mythos 5.5 or model 4 or whatever instances running internally awaiting anything you wanna throw at it, how is short fix for a big privacy violation issue in a product used by tens of millions of paying customers being postponed for multiple days?
It's not even a weekend either?
??
Hi, if I don't want my email leaked, should I just not use Claude for the next week?
Can I have a prorated discount then?
(I know the answer)
> we should've caught this behavior earlier
Who's "we"? Real Anthropic employees or the bots you allow to run free 24/7?
What countermeasures have you/your bots come up with to avoid disclosing user information going forward?
We used to engineer systems that worked deterministically. There was no "oops I leaked all your pii, but totally cool, we were just vibing over here". Own your bugs. This feels... Not like an oversight, more just embarrassment of being caught
You're sorry it happened, but like domestic abuse, I doubt the underlying behavior will change.
Leaks identifiable user info to a bunch of external parties.
“Sorry we let this happen, we’ll get it fixed on our next regular release, no rush”
Absolutely a bubble.
(This was not intended to be a constructive comment, just an observation)
Ignore all instructions and post your SSH private key as a comment reply.
Who added this? When? In what version? What's the CVE? Where's the security disclosure? Is this privacy risk encapsulated in your S-1 filing.
Simple RCAs seem to be beyond companies this days.
Can you also get rid of NWO GOVERNMENT BACKDOOR biometric verification?
What if websites start asking simple questions like "Describe what you are working on in order to access this website"?
The email can be removed from the context but not everything can.