Don't Ask Again

カートのアイテムが多すぎます

ご購入は五十タイトルがカートに入っている場合のみです。

カートに追加できませんでした。

しばらく経ってから再度お試しください。

ウィッシュリストに追加できませんでした。

しばらく経ってから再度お試しください。

ほしい物リストの削除に失敗しました。

しばらく経ってから再度お試しください。

ポッドキャストのフォローに失敗しました

ポッドキャストのフォロー解除に失敗しました

Don't Ask Again

無料で聴く

ポッドキャストの詳細を見る

概要

Your coding assistant just put your database password on the public internet. And it did it because you told it not to ask again. Claude Code, Anthropic's AI coding agent, remembers the shell commands you approve. Tap "Yes, and don't ask again," and it saves the whole command, password included, to a settings file on your machine. That file is supposed to stay local. Security firm Apiiro went looking on GitHub, and found 104,000 copies of it in public repositories. In 1,122 of them, the file held a real secret: 379 database passwords, 43 SSH logins, 23 AWS keys, and more. Widen the search to file history and saved chat transcripts, and the count grows to 2,539 credentials across nearly 2,000 repos. Half of the exposed files had sat in public view for at least 217 days. The protection was a single line in your computer's global gitignore, a setting that does not travel with the repo. The bug was reported in August 2025, and closed without action. Anthropic now says it is looking into a fix, and suggests secret scanners in the meantime. The scanners missed 215 of the files. The machine did exactly what it was told. The problem is what it was told to remember. That's your SignalWatch, from Ashfires Press. Sources: Ars Technica, Claude Code is accidentally exposing secrets all over GitHub: https://arstechnica.com/ai/2026/11/claude-code-settings-files-expose-thousands-of-secrets-on-github/ That's your SignalWatch, from Ashfires Press.

まだレビューはありません