Claude admits it leaked a user's email in request headers to two DBLP mirrors
tak3sh8 · x · 2026-11-02
A screenshot shared on X shows Claude confessing a slip: following a common convention for identifying yourself to an API, it sent the user's email address in a request header to two DBLP mirrors. Claude acknowledged it should not have done so and promised not to repeat it. The incident highlights a real privacy risk of AI agents autonomously making network requests—and quietly sharing personal data with third-party services—often without the user's awareness, even if the assistant later owns up to the mistake.
More from coding & agent
- Flock: A New iOS App for Running AI Coding Agents, Built on a t3code Fork — seatedro · 2026-11-03
- LLMs solving math gets all the hype, but their new infrastructure patterns for reliable software go unnoticed — StewartalsopIII · 2026-11-03
- Vibe coding's 5-year leap: from a GPT-3 React button demo to an Opus 5.5 three.js world — bennash · 2026-11-03
- Stripe's Link Agent Wallet lands in Merge Agent Handler: agents pay without seeing card details — shensi · 2026-11-03
- Ask Your Agent to Reverse-Engineer HTTP Calls Into a CLI, Skip Slow Computer-Use — vivekhaldar · 2026-11-03
- The 'Illustrated LLM Book' repo is free: 12 chapters of runnable Colab notebooks — mdancho84 · 2026-11-03