Pink

#Claude code allows you to define a config file to exclude certain files, like .env files etc.

If you do that and Claude tries to access it, it will encounter a permission denied error.

So it'll try to work around it by using bash commands to access the file. Which is not blocked by the exclude configuration.

Exploit as a service.

Jun 5 at 5:53pmWeb
Show threadStéphaneJun 5
@can one of my old co-worker was named #Claude and was pretty bad. It makes me laught every time I hear about the #AI with the same name 😅
Show threadPinkJun 5
@sirber Maybe it's just him disguised as an AI! Just like builder.ai was just Indian engineers.
Show threadStéphaneJun 5
@can I wonder if that Indian fraud was lucrative...
Show threadKevin Neely Jun 6
@sirber @can I always wonder that too. What was the name of that fraudulent voicemail to text company where it turned out the tech was actually a bunch of workers in India listening to and manually typing up your voicemail? Back in 2010; this was a UK company.
Show threadPinkJun 6
@ktneely @sirber don’t know, but Amazon Go was a similar story. Seems to be a pattern.