Hacker News

points by dannyw 2 days ago | 0 comments

Email addresses are PII. The GDPR also has higher protections for AI processing, like here.

If you’re in the EU, send a complaint to your data protection authority.

I imagine quite a few would be very interested in following up and investigating here, and getting Anthropic to drop the email from the system prompt.

[–] subscribed 2 days ago

I'm going to send the complaint. They've been sharing my PII without my consent and knowledge.

Nice that this time we get the company to admit it in public, and that they've been aware of that earlier but only acted now.

[–] xp84 2 days ago

No objection to your assertion; but it seems much harder to fix than just that. Doing `git log -n 1` will pull up an email 99% of the time. It may not be the same email, but it's just as PII anyway.

I suspect the privacy plugin method is a more sane fix -- ideally, plain old code should be inspecting any web request my agent makes and let me decide if that outbound request should contain certain sensitive strings. I'd also want to put a few bytes of my SSH private key and of any other sensitive keys in the 'do not leak' watchlist as well.

[–] subscribed 2 days ago

What even is this answer? Full of really really far fetched assumptions.

Not everyone uses the same company email with Claude and on github, not everyone commits to public repos, not everyone uses the same email on LinkedIn.

This is an example of a really weird gymnastics.

Me, for example, I'm using my private email with Claude, different email on LinkedIn, different email and unconnected username on a new github account I created for this job, and I don't even use it for public repos.

How come you get to decide that the fact someone puts their real email in commits and knowingly shares it with everyone is the same as Anthropic pulling a private, personal email and real name they had no consent to share - and spray it all over the Net?

[–] phoghed 2 days ago

Anthropic didn’t pull it. You ran the agent on your computer, you gave it unfettered access to that information, you let it send requests that you didn’t review. Honestly why would you be surprised that something like this could and would happen?

[–] subscribed 2 days ago

Many assumptions and "responses" that don't even tangentially touch my comment.

Do you want to try again?

[–] phoghed 1 day ago

Oh got it, not affected by this at all and just whining for no reason. Check, noted, good work.

[–] subscribed 1 day ago

I'll try once again: your fallacies have been noticed and that alone would be sufficient to disengage.

But there's also the thing you're either replying to the wrong person (your comment is not relevant in the context of mine), or you just wanted to make an irrelevant statement in what case why would you demand anyone engaging with it?

I hope it was simpler.

[–] phoghed 16 hours ago

I’ll try again. You’re whinging and cringing about something that apparently doesn’t affect you. Just dog piling onto the circle jerk. Peak HNery. Love to see it. Never quit. You’re the beating heart of this website.