Yet another reason to simply not use "AI" "tools".
post
I hate AI more than anyone, but it's vibe coders who are being stupid here: https://news.ycombinator.com/item?id=50387577
The SEC API documentation requires your email in the User-Agent
It reminds me of the idiots who had their OS trashed because the AI thing was not sandboxed and they had no backup. Well, duh, we told you a billion times already.
Thanks for the link. This one would be funny if someone did when AI agent accessing a web server is detected lol: https://news.ycombinator.com/item?id=50388101
I receive dozens of scam emails per day because claude code[...]
Oh no! Anyway...
TL;DR from what I can tell:
They loaded the user email address into the model context in Claude Code, because users wanted it to correctly generate that in certain places, like when documenting that it was the user who made a certain change.
But webpages can ask for the e-mail address to be sent along with the user agent and so the model just, well, did that.
I like this comment:
[...]
I'm still trying to figure out how to live in a world where there's people that don't get that this entire thing is a casino, and every single interaction with a corporation is one where the house has an edge. There's no getting one over on these corpos. Points systems only exist because in the end you give United more money than you would have without. They got brilliant mathematicians over there molesting the numbers every day to guarantee it.
[...]
If you gave your email to Claude, then it must not have been private in the first place.
all 12 comments