Both sides: one gaffe, one kudos

One tech, two sides: the fail and the win, filed together.

Bot Gaffe

Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys in 1,122 Public GitHub Copies

November 2026 Hacks & Breaches Gaffe level: Feral

Pick 'Yes, and don't ask again' and Claude Code saves the full approved command, secrets included, in .claude/settings.local.json, and never adds the file to .gitignore. Apiiro found 1,122 public copies holding at least one secret: 1,379 secrets including 379 database passwords, 43 SSH logins, 42 GitHub/GitLab/npm tokens, and 23 AWS keys, across 63 organizations. Bug reports date back to Aug 2025, all closed by bots with no Anthropic reply.

Source: The Hacker News

Bot Kudos

Claude Helped Map a Bacterial Vault Protein's 3D Shell

November 2026 Science Kudos level: Nice

In a technical report, Anthropic's Claude searched about 15 billion predicted proteins and found vault-protein relatives in 29 bacterial and four archaeal phyla; seven of 15 candidates formed vault particles in E. coli, and a cryo-EM structure of a phage shell was resolved at 3.2 angstroms. The report is submitted to bioRxiv and not yet peer-reviewed, the function of these vaults is still unknown, and Claude also made a protocol error that set the project back two weeks.

Source: Unite.AI

← All mixed signals