In all fairness, treating API tokens as compromised the moment you pasted them into an AI chat seems a reasonable default in general.
reply> treating API tokens as compromised the moment you pasted them into an AI chat seems a reasonable default in general.
replyCoding agents in my experience alert you to this, which is good. I pasted what was temporary token I made into Claude, just to test something, and after it had done the task it said something like, "you gave me a live token to work with in the chat, I'd advise you to treat that as exposed and rotate it."
It would be a good standard for all chat interfaces to have those "alerts" built in.
Claude itself tends to store secrets plaintext on disk, discussed 2 days ago https://news.ycombinator.com/item?id=50407882
replyThat’s like leaving your phone in the public square. You should expect that it could get stolen. But Mike’s friend can’t go “well to be fair...” when Mike steals it.
reply[flagged]
replyYes, and they won't let admins see it either. It's insane.
reply> "unattributable Notion AI chat transcripts"
replyWho is using Notion for a chat about the weather? It's chats about your content and data.
my initial thought too; even if your chat is cursory or OT it still contains lots of PII adjacent information
replysounds like someone just read the inference container logstream and didn't implement wide logs
reply