Claude Code is accidentally exposing secrets all over GitHub

Claude Code is accidentally exposing secrets all over GitHub

fivenewscrypto    novembre 10, 2026   

Claude Code is leaking sensitive information on public GitHub instances thanks to a partial oversight in the way its settings files are handled. That's the finding of AI security researchers at Apiiro, who discovered thousands of secrets, including database passwords, API tokens, and root logins, amid Claude Code settings files embedded in GitHub repositories.

The leak stems from the way Claude Code handles user approval for automated shell commands. When a user chooses the "Yes, and don't ask again" option to approve running a command, that choice gets stored as part of a rule in the local ".claude/settings.local.json" file on the user's computer. That rule is sometimes coded as a pattern, but the command itself is often written to that settings file as is, including any sensitive information that may be embedded within it.

This isn't really a significant security issue if the settings file stays on the user's local machine (assuming that machine doesn't become compromised itself, of course). And Anthropic notes in its Claude Code documentation that this particular settings file gets added to the developer's global .gitignore list, which usually prevents it from being shared publicly.

Read full article

Comments

Nvidia CEO's affair becomes a national security problem

Nvidia CEO's affair becomes a national security problem

fivenewscrypto    novembre 10, 2026   

Nvidia’s chief executive Jensen Huang has admitted having an affair two days after the FT reported his alleged romantic relationship with a woman the US intelligence community believes was working as a spy for China.

Huang revealed the affair in an internal message to employees on Sunday that was obtained by the FT.

“I owe my family and all of you an apology,” Huang said in the message. “I was unfaithful to my wife. My actions hurt her and our children. There is no excuse for what I did. I am deeply sorry.”

Read full article

Comments

F1 in Brazil: You’ve got to keep your tires alive

F1 in Brazil: You’ve got to keep your tires alive

fivenewscrypto    novembre 10, 2026   

In sports, a “dead rubber” is a match that takes place after the outcome of the series or championship has already been decided. The people in charge hate this*—if you wrap up a title two-thirds of the way through a season, the viewers evaporate, as there’s nothing left at stake. But anyone who decided to skip this year’s Brazilian Grand Prix this past weekend missed one of the year’s most entertaining races, as a combination of a mixed-up starting order, some very fast drivers at the back, and a wet track that dried and then saw rain again resulted in action aplenty.

A peculiarity of F1 is that even if you manage to win a championship, there’s no guarantee you’ll be in a position to defend it. Take McLaren’s Lando Norris, who took the crown in 2025 after a nail-biting fight with his teammate Oscar Piastri and Red Bull’s Max Verstappen. Sadly for Lando, McLaren did not start this year in a position to win races, and even with several upgrades, the team has produced a car that is still very tricky to drive. But this weekend in Brazil, Norris demonstrated the form that earned him the number 1.

Rain on Saturday during qualifying helped jumble the usual running order. It was heavy enough that drivers used the wet weather tire with deep treads, which usually generates so much spray that visibility disappears and running has to be suspended. But with fewer cars on track in the later knockout qualifying sessions, this was not a problem for once. More disruption came from grid penalties for Verstappen and Ferrari’s Lewis Hamilton, both of whom needed to use extra power unit components outside of the season’s allowance.

Read full article

Comments

New Democratic Congress will likely strip the gilding from Trump's Golden Dome

New Democratic Congress will likely strip the gilding from Trump's Golden Dome

fivenewscrypto    novembre 09, 2026   

Two of the top lawmakers backing the Pentagon's Golden Dome missile defense shield are among the wave of Republicans leaving Congress in the coming Democratic takeover, raising questions about the future of President Donald Trump's signature second-term defense initiative.

The shakeup on Capitol Hill comes after military officials signaled in recent months that they might backpedal from one element Trump asked for in Golden Dome: the capability to shoot down missiles in their initial boost phase shortly after launch.

The Golden Dome has escaped serious congressional scrutiny since Trump announced the program in January 2025, one week into his second term in the White House. That lack of scrutiny will change as Democrats take responsibility for writing the Pentagon's budget, introduce limits on funding, and put forth bills to strip out Golden Dome's most controversial component and give the program a new name.

Read full article

Comments

Physicists listened to electrical noise to crack a superconductor mystery

Physicists listened to electrical noise to crack a superconductor mystery

fivenewscrypto    novembre 09, 2026   

Superconductors carry electricity without resistance, but most only work a few degrees above absolute zero. In the late 1980s, copper-based materials called cuprates were found to superconduct at higher temperatures—reachable with affordable liquid nitrogen. Yet nearly 40 years later, physicists still don't agree on why.

In a recent Science study, a team of physicists led by Milan Allan of Ludwig Maximilian University of Munich and Ingmar Swart of Utrecht University in the Netherlands has found some answers by listening to the faint electrical crackle of current flowing into a cuprate.

The missing electrons

Central to the mystery of cuprates’ high-temperature superconductivity is a strange state called the pseudogap. “The pseudogap is a phenomenon of missing electrons,” Allan said. Above the temperature at which cuprates become superconducting, some of their electrons seem to vanish—measurements find far fewer of them at the energies where they should be. “Everybody knows that from different probes, you see that there's these vanishing electrons, but nobody knows why,” Allan said.

Read full article

Comments

The Bantu expansion changed Africa. Scientists are still tracing how.

The Bantu expansion changed Africa. Scientists are still tracing how.

fivenewscrypto    novembre 09, 2026   

It’s not easy to extract iron from its ore. But the peoples of the ancient city of Great Zimbabwe—the capital of a thriving kingdom in southern Africa between 1000 to 1700 AD—were masters.

At sites near the city’s stone ruins, clusters of iron-smelting furnaces survive today as mounds of rubble. At Mashava, a village 25 miles northwest, fragments bear fingermarks of those who long ago smoothed the structures’ clay interiors.

Some of the furnaces were nearly an adult’s arm span in width, with walls thick and strong to contain the heat of more than 2,100° Fahrenheit needed to smelt iron. Unlike other furnaces that required workers to force air into them with bellows, these were designed to suck air in, then out through a chimney, no human labor required. This would have made it significantly easier to produce the iron, which was fashioned into hoes, axes, and arrowheads.

Read full article

Comments

British soldier ignored order to pull his SIM card, then got blackmailed

British soldier ignored order to pull his SIM card, then got blackmailed

fivenewscrypto    novembre 09, 2026   

An Estonian newspaper recently revealed that a British soldier disobeyed a direct order to remove the SIM card from his cellphone before being deployed to a part of Estonia, approximately 90 miles west of the Russian border.

As a result of his refusal to engage in this element of operational security (opsec), the soldier, Daniel Barton-Kennedy, had his phone hacked, and nude photos of himself were stolen and used as blackmail against him.

Eventually, Barton-Kennedy was court-martialed for disobeying a lawful command, pled guilty, was reduced in rank, and ordered to serve 10 months in detention.

Read full article

Comments