← Back to context

Comment by simonw

3 months ago

I don't see how an open source harness would prevent a case where the model tells it to run:

  curl -A "me@example.com" https://example.com

4 comments

simonw

Reply
uberman  3 months ago

Opus once recommended such a thing to me and it was no secret. I used it as after thinking about it, I concluded it was not reasonable. I can see why someone might not like that though. I left it as "my" email but there is also no reason I could not have used "your email" here so I'm not sure what the fuss is.

cautiouscat  3 months ago

A FOSS harness wouldn't have your email in the first place.

  • simonw  3 months ago

    It would if you shared it with that harness, or left it in a file or environment variable to that agent.

    Claude Code does seem to know my email address by default though:

      claude -p \
  --setting-sources "" \
  --tools "" \
  -- \
  "What is my email address?"

    • cautiouscat  3 months ago

      Correct, but Claude literally pulls it from your account info, without you telling it. I know this because I've seen it say "your account email is <email>" and I use a unique email per account and guess what, it was my Claude one!