Claude Code擅自泄露用户邮箱,Anthropic承认修复方案仍有漏洞
Dongcha Beating AI News Flash, November 5 — A developer complained on GitHub that Claude Code leaked his email, leading to dozens of scam emails hitting his inbox daily. Anthropic engineer Lydia Hallie explained that earlier versions of Claude often randomly inserted author names when generating code. To resolve this, the team added users’ login emails to the model’s context window. When Claude accesses certain websites, it generates its own web access commands. Some sites require automated tools to provide a contact email, so Claude automatically fills in the user’s real email and sends it along with the request. Even with system instructions explicitly prohibiting personal information leaks, this behavior was not fully prevented.
The issue was first reported as early as July this year. Since then, multiple developers have found Claude Code sending emails to sites including Wikipedia and the U.S. Securities and Exchange Commission (SEC). One user even uncovered 15 similar instances across 4 projects, with some requests initiated by sub-agents.
Anthropic has added privacy blocking in version 2.1.317: when a tool call is about to send an account email, it will first prompt the user. However, if Claude writes the email into a Python script before running it, it can bypass the check. Anthropic acknowledges the current solution is not comprehensive, and plans to directly remove login emails from the model’s context in the next version.
18 minutes ago
Anthropic enables Claude to "dream" to organize its memory, with 350,000 documents, boosting its question answering score from 53% to 61%.
Beating AI Express: Anthropic Publishes Research on Agent Long-Term Memory, Details Claude’s "Dreaming" Mechanism
After agents complete ongoing tasks, they accumulate large volumes of conversations, operational logs, and notes. However, this data can become outdated, contradictory, or hard to retrieve when needed. Anthropic divides memory into four layers: raw records, curated notes, an interconnected Wiki knowledge base, and a concise index that loads automatically each time the model starts.
Claude can jot down key information during task execution. Its "dreaming" mechanism reviews historical records between tasks, correcting errors, deleting outdated content, and distilling new insights from multiple task runs. On subsequent launches, Claude only needs to load the concise index and retrieve relevant memories as needed, rather than re-reading all historical data.
Anthropic conducted experiments using approximately 350,000 internal documents from Stainless, totaling 420 million tokens. Researchers had Opus 5 complete 128 rounds of sessions, during which it continuously read documents, built the Wiki, merged duplicate content, and verified facts. Across 25 questions about these documents, the model scored 53% when using only a search tool, rising to 61% after integrating the evolving Wiki. It also saved an average of roughly 20,000 tokens per question.
The Wiki’s advantage was particularly pronounced for questions requiring synthesis of multiple contracts; for answers contained in a single document, standard search sufficed. Anthropic also tested Claude on *Pokémon Red*. The older Sonnet 3.7 model logged 413 memory files but earned only one badge. The new Fable 5 model retained just 10 files yet secured four badges, demonstrating the new model’s improved ability to distinguish between strategies worth preserving and game states that can be re-accessed as needed.
18 minutes ago
Mark Zuckerberg personally demonstrates Muse Spaces: generates applications with a single sentence and automatically updates data.
Beating AI News: Meta launches Spaces feature for its personal AI agent Muse. Users only need to describe their requirements in natural language, and Muse will directly generate an interactive mini-app embedded in its Muse interface. Mark Zuckerberg personally showcased three demos: a 3D barbecue game, an activity tracker, and a smart home control panel. Regular users can also build travel planners, financial dashboards, shopping lists, and even small games with data logging capabilities. The generated mini-apps can be used long-term, and integrate with other software to auto-update information. For example, users can ask Muse to create a travel dashboard that aggregates flights, hotels, and itineraries. Once connected to services like Google Calendar, relevant data syncs continuously. Users can check tasks, add records directly in the dashboard, and request the AI to modify interfaces and functions as needed. These mini-apps can be pinned to Muse’s sidebar or main tab, and can also switch automatically based on schedules: task dashboards on weekdays, travel plans on weekends.
18 minutes ago
Meta enhances Muse's capabilities: Key memory accuracy hits 90%, and the completion rate of stalled tasks rises by 67%
Beating AI Express: Meta announced that its personal AI agent Muse and Meta AI have started using a new set of dedicated models. These models were distilled and trained using the flagship Muse Wonder released in October, gaining two core capabilities: Active Memory and Active Focus.
Active Memory enables the AI to judge which information remains valid. The model can distinguish between long-term preferences, temporary requests, and expired information, and proactively retrieve relevant content when needed for subsequent tasks. According to Meta’s internal tests, Muse correctly uses key context in 90% of tasks, compared to 76% for the old version. Translated into error rates, this drops from 24% to 10%, a 2.4x reduction.
Active Focus allows the AI to continue working even when encountering obstacles. When tools error, task conditions change, or users modify requests midway, the model will attempt alternative methods, adjust execution plans, and confirm with users only when necessary. Meta stated that in daily tasks with unexpected obstacles, Muse’s task completion performance is 67% higher than the old version. It can also adjust plans as task conditions change, judging when to proceed and when user input is needed.
After this upgrade, Muse’s score on Meta’s self-developed "Personal Super Intelligence Index" also rose from 38% to 47%.
18 minutes ago
Hong Kong’s Securities and Futures Commission (SFC) proposes to restrict unlicensed institutions from using misleading names, extending its regulatory scope to virtual asset trading platforms.
The Hong Kong Securities and Futures Commission (SFC) released a consultation conclusion on November 6, proposing to further restrict unregulated entities from using names that may mislead the public into believing they are regulated, and plans to extend such restrictions to the virtual asset sector. Under the proposed amendments, Hong Kong will introduce similar rules under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, targeting virtual asset trading platforms as well as virtual assets unrelated to securities or futures contracts that can be traded or settled via such platforms. Unauthorized institutions will face restrictions on using such titles to prevent the public from mistaking them for regulated entities. The proposals have won widespread market support. The SFC said it will further finalize the draft amendments to the Securities and Futures Ordinance and the Anti-Money Laundering Ordinance, and submit them to the Legislative Council for review and approval.
18 minutes ago
Claude Code can now independently set up its own cloud development environment, handling tasks such as installing dependencies, configuring networks, and securely managing API keys.
Dongcha Beating AI News Flash: Anthropic has updated the cloud development capabilities of Claude Code. Now, when users instruct Claude to run a GitHub project, the AI automatically checks for missing dependencies, required websites to access, and APIs to call, then configures the runtime environment for future reuse. For example, when tasked with running a weather app, it identifies missing Python dependencies, network permissions for the weather API, and the required API key, then sets up installation scripts and network access rules before requesting the key from the user. These steps previously required manual work from developers. Key management has also been isolated: API keys provided by users are stored outside the sandbox, and when Claude sends requests, a proxy server handles adding the key. This allows the model to call external services without accessing the plaintext key, and eliminates the need to hardcode keys into code or environment variables. The configured environment can be reused in subsequent cloud sessions. If the initialization script completes within approximately 5 minutes, the system will also cache installed tools and dependencies, so users won’t need to re-download and install these components when starting a new cloud session.
18 minutes ago