73 points motoroco 35 minutes ago 13 comments

motoroco 35 minutes ago | parent

Claude code writes adds a `User-Agent` request header like `my-session-slug/1 <my.name@example.com>` when searching the web and requesting data. This violates the privacy of paying customers and has resulted in me getting dozens of scam and phishing emails per day from properties I have never personally visited. This policy is asinine: it does nothing but harm me, the customer, while providing immense value for scrapers and scammers.

tcoff91 12 minutes ago | parent

Wow... this is insane! What a terrible idea.

These are the exact kinds of things that a human engineer would almost certainly never do.

This kind of thing is the problem of going all in on the idea of the AI Software Factory.

verdverm 7 minutes ago | parent

EGreg 12 minutes ago | parent

This is why I prefer to use the chatbots on a website, instead of Claude Code.

I've never used Claude Code or Cursor. All the code I got written this year was without them.

I did use Microsoft Copilot a bit when it came out, though. I prefer to see exactly what's being sent, and sorta control the KV cache. These days, these chatbots have great environments where they can install headless browsers, php, your entire thing, run end-to-end tests, and then give you a .patch or .zip file to merge over your code, or even push to github.

verdverm 6 minutes ago | parent

Things like this, after trying out several harnesses, is why I'm going back to building my own. It's also fun and interesting

TutleCpt 11 minutes ago | parent

Oh man.

matheusmoreira 11 minutes ago | parent

That is just so disgusting. So happy I switched away from Anthropic.

For the record, I just asked Astra to verify that Codex does NOT do this, and it doesn't. Thanks for not screwing this up, OpenAI.

> I checked your installed Codex CLI 0.159.0, using your existing configuration.

> Its reported User-Agent contains the client/version, OS/architecture, and terminal—no email address.

Astra wasn't able to check OpenAI’s "hosted search service" though, whatever that is.

nekusar 6 minutes ago | parent

This, along with all the other sabotages, is why I run a local abliterated Qwen.

mk89 6 minutes ago | parent

This explains the amount of spam emails I am receiving in the work email since I switched to Claude. I used to work with copilot which was fine. Now I am getting really a lot of spam emails almost on a daily basis. Absolutely crazy.

Stupid me, I thought they somehow had hacked my company database or so... (considering all the cves, attacks happening on a daily basis...).