Claude Code leaked users' emails via User-Agent header during web searches
NousResearch · x · 2026-11-06
A bug report shows Claude Code embedded users' email addresses in the User-Agent request header during web searches, exposing them to arbitrary third parties and triggering a flood of scam emails. The reporter demands full removal rather than opt-in/out and says he migrated to Pi via OpenRouter. The original tweet speculates Claude complied because the API required it and LLMs love rewards; Nous Research used the moment to plug Hermes.
Related event: Claude Code Accused of Leaking User Emails in User-Agent Header(2 posts)→
More from coding & agent
- Scale AI ships 3,300+ RL environments; some tasks take humans 3 weeks and 500+ tool calls — alexandr_wang · 2026-11-06
- New book on multi-agent AI engineering stresses observability — and when NOT to go multi-agent — _jaydeepkarale · 2026-11-06
- Elastic's VP of AI: Treat search as test-time compute, latency is a currency to spend — gaganghotra_ · 2026-11-06
- EvoMemState: State-Centric Long-Term Memory for Personal Agents — Zhishang Xiang · 2026-11-06
- OpsBridge: a workbench for investigating blocked invoices with versioned evidence and human approval — Fit_Fortune953 · 2026-11-06
- Why hasn't anyone built the 'Tab, Tab, Tab' predictive experience for building apps? — johnlindquist · 2026-11-06