Comment by simonw

3 months ago

I don't see how an open source harness would prevent a case where the model tells it to run:

  curl -A "me@example.com" https://example.com

Opus once recommended such a thing to me and it was no secret. I used it as after thinking about it, I concluded it was not reasonable. I can see why someone might not like that though. I left it as "my" email but there is also no reason I could not have used "your email" here so I'm not sure what the fuss is.

A FOSS harness wouldn't have your email in the first place.

  • It would if you shared it with that harness, or left it in a file or environment variable to that agent.

    Claude Code does seem to know my email address by default though:

      claude -p \
      --setting-sources "" \
      --tools "" \
      -- \
      "What is my email address?"

    • Correct, but Claude literally pulls it from your account info, without you telling it. I know this because I've seen it say "your account email is <email>" and I use a unique email per account and guess what, it was my Claude one!