426
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub (thehackernews.com)
submitted 3 days ago by to c/technology@lemmy.world
37 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 1 day ago (2 children)

Absolutely it's got a lot better, and it can do a lot of things, but it can also oopsie wipe your entire repo (and be very apologetic afterwards). I can't understand how you've not heard those stories and I can't understand how you would give one executive power if you had.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 day ago* (1 child)

    I've heard people doing that way more often.

    I can't understand how you've not heard those stories and I can't understand how you would give one executive power if you had.

    I don't quite understand why would you even assume this. Codex has no access to repo, network access needs manual approval, it is sandboxed to project directory (backup'ed after every step) and commands (which is mostly PowerShell since I'm on windows) needs reviews and approvals.

    I can only assume the people who got burnt didn't practice basic sanity as you obviously can't trust LLMs

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •