Hacker News new | past | comments | ask | show | jobs | submit
matheusmoreira | on: Claude Code sends your email address to websites
That is just so disgusting. So happy I switched away from Anthropic.

For the record, I just asked Astra to verify that Codex does NOT do this, and it doesn't. Thanks for not screwing this up, OpenAI.

> I checked your installed Codex CLI 0.159.0, using your existing configuration.

> Its reported User-Agent contains the client/version, OS/architecture, and terminal—no email address.

Astra wasn't able to check OpenAI’s "hosted search service" though, whatever that is.

oefrha | parent | next
As long as the email is in the context, which it is IIRC, it can totally decide to run curl –H 'User-Agent: <your email blah blah>'. You need to have a pretty poor understanding of LLMs to think this is a deterministic problem of reading user agent builder source code. Unless you found explicit filter code that blocks the behavior, that is. LLM info leaks to third parties mostly aren’t deterministically coded behavior.

Edit: I’m not completely sure if Codex injects email into system prompt (not at the computer, can’t check, but IIRC the model does know my org domain), but even if it doesn’t, it will be in the context as soon as it makes a git commit anyway.

matheusmoreira | root | parent
I never claimed the LLMs themselves couldn't "accidentally" leak the information through. Obviously, the LLMs can do anything they want.

The issue here is whether the harness is doing it. Claude Code is doing it. Codex is not.

oefrha | root | parent
The problem here literally is the non-deterministic model cooking up commands with the user email address in the header, and the harness not blocking that (and the implemented fix is to deterministically block that), not the harness deterministically hardcoding the email in the web search tool. No technical report I’ve seen has claimed the latter, although this particular linked report which is low quality and vague can be misinterpreted as that.
loading story #50386584
| parent | next
{"deleted":true,"id":50386307,"parent":50385543,"time":1793922981,"type":"comment"}
lukan | parent | next
I would not recommend of getting in the habit of just trusting that.

"For the record, I just asked Astra to verify that Codex does NOT do this, and it doesn't. Thanks for not screwing this up, OpenAI."

matheusmoreira | root | parent
Astra checked the Codex source code that gets compiled and shipped by Arch Linux. Straight up linked me to the User-Agent builder code.

https://github.com/openai/codex/blob/687a119f0fcaace47e1f1ab...

That's more than sufficient for me. The open source codex client seems clean.

There is some kind of "hosted search service" that I couldn't verify. I don't have a remote server I can point it at in order to inspect the traffic. Would be cool if someone else could shed some light on that.

agentdev001 | root | parent
Hosted search service sounds like its referring to the alpha/v1 web_run hosted search api. Alternative to the hosted websearch tool, which is a tool- rather than api surface
hendiatris | parent | next
You asked it to verify it doesn’t do this? That allayed your fears?

доверяй, но проверяй

matheusmoreira | root | parent
I read the codex source code it linked me to.
loading story #50386215
cadamsdotcom | parent
Why not find out the truth instead of putting a hallucinating probability box in between you and the truth.

One way would be to fire up a little web server locally, have the agent make a request to it, then check the logs.