Anthropic has embedded hidden spyware-like code in Claude Code

https://twitter.com/IntCyberDigest/status/2071971609183678544

by kyokoL • 23 days ago

56 11 23 days ago

kyokoL• 23 days ago

Anthropic has embedded hidden spyware-like code in Claude Code that covertly targets Chinese users. It then sends information regarding every user by injecting it into their prompt message.

Claude Code is sending info like timezone, proxy and possible AI Lab connections into the system prompt in ways Chinese users can't notice.

A coding agent with repo and command permissions should not silently hide routing metadata inside prompts. This is a serious breach of user trust.

chomp• 23 days ago

I don’t understand why this is a problem.

chews• 23 days ago

you are the perfect customer.

iAMkenough• 23 days ago

Hiding it from users and then charging for additional tokens (if you’re Chinese).

Imagine the outrage if they did the same to Jewish people.

Nevermark• 23 days ago

This is a serious breach of user trust.
> I don’t understand why this is a problem.
This is a serious breach of user trust.

The problem with companies people can't trust, is unless they have a long track record of disclosing who shouldn't trust them before violations, they are companies nobody can trust.

Anthropic also has a habit of making major changes, without notifying anyone, then when they are caught apologizing and making that particular thing more clear. Then doing it again.

For a company that emphasizes the importance of alignment, they seem to be habitually ethically incompetent regarding "smaller" things.

tartoran• 23 days ago

There's another discussion thread:

https://news.ycombinator.com/item?id=48734373

dredmorbius• 23 days ago

<https://xcancel.com/IntCyberDigest/status/207197160918367854...>

dmvjs2• 21 days ago

“spyware-like code” lol

dmvjs2• 21 days ago

“porn-like images” does that sound better?

Anthropic has embedded hidden spyware-like code in Claude Code

Related Stories