Following an official github documentation about integrating Claude with Github MCP ends up with github token in a plain text in ~/.claude.json. Other guides I found did the same, except revealing a different github secrets there.
That means I am really really really surprised that there are so few security incidents like axios. I'd guess the situation is much worse.
#claude
Got that dog in 'em? Cowboys look to build defensive roster of bullies https://cowboyswire.usatoday.com/story/sports/nfl/cowboys/2026/04/29/dallas-cowboys-defense-draft-picks-culture-shift-caleb-down…
🔊 #NowPlaying on #BBCRadio3:
#ClassicalLive
- Prokofiev's 3rd Piano Concerto with Daniil Trifonov
Pianist Daniil Trifonov and today's featured conductor, Franz Welser-Möst, perform Prokofiev's fiendishly difficult and much-loved third piano concerto in a recording from Munich.
Relisten now 👇
https://www.bbc.co.uk/programmes/m002wgb4
If Microsoft owns 27% of Open AI & Open AI declares an IPO... 🤔
✅ MSFT Stock: Why Microsoft's $13 Billion OpenAI Bet Now Pays Off
https://www.marketbeat.com/originals/why-openais-ipo-plans-could-be-a-massive-win-for-microsoft/
If you need a cathartic release from the news that
Amazon laid off 16,000 workers,
Block chopped nearly half its workforce,
Atlassian pared back 10% of staffers,
and Meta is reportedly considering another massive round of layoffs
-- all in the name of AI,
then we invite you to browse the responses to a recent
Sam Altman post on X.
Altman, the CEO of OpenAI,
shared this on Tuesday:
“I have so much gratitude to people who wrote extrem…
− Mindlid: 20% lift in top-1 recall for wellness app
🔗 Available via #GeminiAPI & #VertexAI
Integrates with #LangChain,
If Microsoft owns 27% of Open AI & Open AI declares an IPO... 🤔
✅ MSFT Stock: Why Microsoft's $13 Billion OpenAI Bet Now Pays Off
https://www.marketbeat.com/originals/why-openais-ipo-plans-could-be-a-massive-win-for-microsoft/
🔀 Native parallel execution: independent phases dispatched as concurrent subagent batches with non-overlapping file ownership — no waiting, no blocking
🛡️ Least-privilege 4-tier security model:
Read-Only − Architect, Code Reviewer
Read Shell − Debugger, Security Engineer
Read Write − Technical Writer, Product Manager
Full Access − Coder, Tester, DevOps
📋 Standalone commands without full orchestration:
/review /debug /security-audit
🗣️ Trigger with: /caveman, "caveman mode", "talk like caveman", or "less tokens please"
Stop with: "stop caveman" or "normal mode"
💀 Caveman kills all filler:
— "Sure, I'd be happy to help" − gone
— "The reason this is happening is because" − gone
— "I would recommend you consider" − gone
🧠 Technical precision stays 100% intact: code blocks, error messages, technical terms, git…