426
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub (thehackernews.com)
submitted 2 days ago by to c/technology@lemmy.world
37 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 110 points 2 days ago* (5 children)

Devs accidentally committing secrets and forgetting to gitignore env files is nothing new, this is just a new surface. It's why secret scanning is such an important part of a CI/CD pipeline.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 5 points 2 days ago

    it's a bit tedious in some ways but I really liked working with GitHubs secret system. As long as you ensure nothing changes in the GitHub run system you could use various key signing mechanisms or even uploads to service providers like AWS with out sharing via dot files or user configuration only files that end up being committed to the repo.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 9 points 2 days ago (1 child)

    a high entrop for any data going out from that blind CLI should be banned without exception. The user then needs to approve. its the responsibility of Anthropic.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 6 points 2 days ago

    I can only speak anecdotally, but from what I've seen firsthand the user does need to approve. In fact, the user needs to approve almost everything, unless they choose to put the CLI into "auto-mode" which should just be assumed is at one's own risk.

    In regard to settings.local.json I've only ever seen it automatically created gitignored. I'm not saying it's not possible for the user to prompt in some way to intentionally or accidentally bypass that, but still.

    At some point this honestly isn't Anthropic's problem. And a developer that takes the stance of "privacy and security is the responsibility of my toolkit" is one that is either very green, or reckless.

  • permalink
  • fedilink
  • source
  • parent