The discussion centers on passwords found in committed Claude Code settings files. A Claude Code team representative says `.claude/settings.local.json` is intended to remain local, that users should enable secret scanning, and that auto mode is safer than maintaining permission rules. Commenters clarify that “Don’t Ask Again” does not expose credentials by itself: the risk arises when an approved command containing a secret is saved in a settings file and that file is committed. They also note that repository access matters: the files identified were in public repositories, while private repositories still expose credentials to anyone with access and can spread them through clones or forks.
Commenters divide over whether this is user error or a product failure. Some call committing settings files a basic security mistake and say secret leaks predate AI agents; others argue that writing secrets into project files is foreseeable behavior the company should prevent, and criticize the team’s emphasis on user responsibility. They also dispute the recommendation to use auto mode: supporters say fewer prompts reduce approval fatigue, while critics say it offers no defined security guarantee without sandboxing and can obstruct legitimate workflows. Suggested safeguards include secret scanning, isolated ephemeral machines, API proxies that require confirmation for sensitive actions, and password-manager access requiring biometric approval. Others object that agent access to credentials remains dangerous even with these controls.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
AI is exposing how much of the internet and its software relies on sloppy human work, including code with security vulnerabilities. The growing ability of AI tools to spot these weaknesses is forcing companies to confront the quality and safety of systems people built. (businessinsider.com)
Iran-linked tankers and a fishing boat loitered near major undersea internet cables in the Strait of Hormuz, with some ships switching off tracking transponders. The activity raises concern Iran could target cable infrastructure if the US and Israel resume strikes, potentially disrupting communications across several countries. (arstechnica.com)
A British soldier deployed in Estonia ignored orders to remove his phone’s SIM card and disable location settings, and attackers stole nude photos to blackmail him. He pleaded guilty to disobeying a lawful command and was reduced in rank and sentenced to 10 months’ detention. (arstechnica.com)
Consumer brain-wave headsets collect neural data that manufacturers can use to train AI, sometimes without clearly telling users. The practice raises privacy concerns because brain signals can reveal sensitive information about people. (science.org)
A URL-encoding flaw in Hugging Face Chat let unauthenticated requests bypass an admin check and trigger bulk exports of users’ private conversations. The exported data was sent to a configured dataset destination rather than returned directly to the requester. (twitter.com)
Hackers stole $133 million from a French bank by targeting a service provider. The available details do not explain how the attack was carried out. (bleepingcomputer.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.