332
Claude Code is accidentally exposing secrets all over GitHub: “Do not ask again” prompt leads to passwords, API keys, and more being shared. (arstechnica.com)
submitted 18 hours ago by to c/technology@lemmy.world
32 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 8 hours ago (1 child)

Yeah it's absolutely a tool that needs appropriate use. I've used it multiple times to do something with ansible that their docs didn't cover and I couldn't find any search results for.

But in it's current state it's still unethical, because pretty much every model is trained on license violations.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 6 hours ago

    absolutely.

    I'd like to see if it's possible to train a model entirely on the public code documentation itself, and see if it can figure it out purely with self-learning loops without stealing others work. it would be awful since it's only initial references of real code would be extremely simple examples and some pseudocode, but a self learning model given a framework to test and check, could figure out how to put it together eventually... It would be complete crap and/or unusably slow with the current tech but perhaps it's possible in the future with something other than llm. I guess you would have to say that while the model wasn't trained on stolen code, it would probably require you to agree that all code generated on the model (unless it were self hosted) would serve as reference to the model for other users... so it only steals from itself.

  • permalink
  • fedilink
  • source
  • parent