Hacker News Reader

Comment by simonw | Hacker News Reader

I don't see how an open source harness would prevent a case where the model tells it to run:

  curl -A "me@example.com" https://example.com

View on HN

Opus once recommended such a thing to me and it was no secret. I used it as after thinking about it, I concluded it was not reasonable. I can see why someone might not like that though. I left it as "my" email but there is also no reason I could not have used "your email" here so I'm not sure what the fuss is.

A FOSS harness wouldn't have your email in the first place.

It would if you shared it with that harness, or left it in a file or environment variable to that agent.

Claude Code does seem to know my email address by default though:

  claude -p \
  --setting-sources "" \
  --tools "" \
  -- \
  "What is my email address?"

Correct, but Claude literally pulls it from your account info, without you telling it. I know this because I've seen it say "your account email is <email>" and I use a unique email per account and guess what, it was my Claude one!

Reply on news.ycombinator.com