Don't let your AI agent see your sudo password: session transcripts can leak secrets
OwariDa · x · 2026-10-14
After 0xSpuddy described using an AI agent to repair his system, OwariDa notes he'd rather mount, chroot and passwd himself than scrub a sudo password from a clanker session transcript — asking whether it was actually scrubbed. A first-hand reminder that agent session logs can leak sensitive credentials.
More from coding & agent
- Mercury is the first bank with full MCP access, says reply to viral query — msg · 2026-10-15
- LangChain mda 0.9 adds schedules API for self-scheduling deep agents — Hacubu · 2026-10-15
- Dev says Gemini 4 is 'outright unusable' for real code work due to hallucinations — gnukeith · 2026-10-15
- Open-Science 1.0 launches as open-source AI workbench bundling research workflows into reproducible .science packages — alifcoder · 2026-10-15
- Sentry CEO says AI agent is now the company's No.1 code contributor — zeeg · 2026-10-15
- Dev: I accept about half of AI coding suggestions, a third surprise me positively — nickbaumann_ · 2026-10-15