Claude Code's "Don't Ask Again" setting linked to secrets exposed in 1,122 public GitHub files

·1 views

A security analysis reported that Claude Code's "Don't Ask Again" permission option may be associated with passwords appearing in 1,122 public GitHub files. The findings were published by Apiiro in a blog post examining how coding agents may be leaking secrets to GitHub. The source material is limited to a link and brief discussion metadata, so the specific mechanism and scope of the exposure cannot be fully confirmed from this item. The story gained attention on Hacker News, where it received 30 points and 11 comments.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

NexoPeek: VR molecular lab lets users explore protein structures like lenacapavir's HIV target

A VR molecular lab called NexoPeek, running on Meta Quest, is presented as a way to make structural biology more intuitive. It offers twelve narrated tours organized into six knowledge areas, from basic biotechnology to green bioprocesses. The tools integrate data from several structure databases and support multiple rendering styles and analysis features such as pocket prediction and structural alignment. The article uses lenacapavir's binding to HIV-1 capsid as an example, showing how users can identify its binding pocket and hydrogen bonds in VR. The author stresses that the tool is for education and research visualization only, not for medical advice or diagnosis.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why [] == ![] Is True in JavaScript: The Type Conversion Rules Explained

A developer's late-night puzzle over the expression [] == ![] being true is broken down step by step. The article explains that ! turns an empty array into false, and that the loose == operator then converts types before comparing. Each conversion, from array to string to number, is traced to show the result follows fixed rules rather than randomness. The author contrasts this with the strict === operator, which skips conversion entirely, and shares a personal lesson about wasting time chasing a bug that did not exist. The piece closes by reassuring beginners that these quirks follow a learnable rulebook.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Claude corrects a wrong landmark in its memory using 'dreaming' review sessions

Anthropic's November 6 article on agent memory uses a Pokémon Red example to show how a mistaken note can persist into later sessions and keep causing failures. In the case described, Claude wrongly recorded a Pokémon Center's position relative to Mount Moon, which led it to repeat an error after a one-way ledge fall. Anthropic describes 'dreaming' as additional sessions that review transcripts and reorganize persistent context, and in this case the corrected note let the branch reach Cerulean City. The article defines agent memory as knowledge kept in readable context between sessions and explicitly excludes changes to model weights. The source reports these results from its own evaluation, and the authors' gameplay claims were not independently replicated.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

GitHub Copilot expands to JetBrains Air and Xcode, adds agent oversight tools

GitHub has brought Copilot into JetBrains Air and Xcode's built-in coding assistant, the latter in public preview from Xcode 27.3 beta. The JetBrains integration adds multiple-session tracking for running tasks locally or in the cloud via Air Teams, under an existing Copilot subscription. Alongside these entry points, GitHub bundled supervision features, including Agent Merge staying enabled while required checks are pending and tools for reviewing pull requests and managing sessions. The announcement leaves unstated details such as resource limits, plan eligibility, general-availability timing, and whether session management carries over to Xcode. Commentary notes that tracking sessions is not the same as coordinating agents.

0 comments Read more at DEV Community