Aggregator

Anthropic Removes "Scary" Secret Claude Tracker After Developer Stumbles Across It

Anthropic has removed hidden detection code from its Claude Code tool after a developer reverse-engineered the binary and exposed how the company was subtly monitoring users in China.

The code, which Anthropic described as an experiment launched in March, used a form of prompt steganography to signal information about a user's environment back to Anthropic's servers. It was designed to help detect unauthorized resellers and attempts by other organizations to distill Claude's capabilities into their own models.

How The Detection Worked

The mechanism was first spotted by a Reddit user known as LegitMichel777, who stumbled on it while trying to restore a disabled feature in Claude Code. A separate developer known as Thereallo independently confirmed the finding the same day, June 30, publishing a technical breakdown of exactly how it worked.

The checks only ran in one specific situation: when a user pointed Claude Code at a different server instead of Anthropic's own - something companies commonly do when they route their traffic through internal systems or third-party gateways. From there, it checked two things:

• Whether the user's computer was set to a Chinese time zone (Shanghai or Urumqi).
• Whether the new server address matched a hidden list of Chinese AI companies (including well-known names like DeepSeek, Zhipu, and Moonshot) or known resale and proxy services.

If either check came back positive, Claude Code would quietly tweak a line of text called the "system prompt" - background instructions the app automatically sends to the AI model with every request, invisible to the person typing. Specifically, it changed how the date was written in that line:

• If the user was in a Chinese time zone, the date switched from using dashes to slashes (e.g., 2026/06/30 instead of 2026-06-30).
• The apostrophe in the phrase "Today's date is..." was swapped for one of three lookalike characters, each one a different signal, depending on which combination of checks the session had triggered.

None of this was visible to users, or likely even to the AI model itself in normal use - the characters look identical on screen. But Anthropic's servers could read the difference instantly. The lists of flagged domains and keywords were also scrambled inside the app's code using a basic encryption trick, so they wouldn't show up if someone just opened the file and searched for them.

Thereallo called the approach "prompt steganography" - hiding a signal inside ordinary-looking text - and noted it let Anthropic sort and flag sessions without needing any separate, visible tracking system.

Anthropic's Explanation

Last Tuesday, Anthropic engineer Thariq Shihipar, who works on the Claude Code team, confirmed the feature on X:

"This is an experiment we launched in March that was meant to prevent account abuse from unauthorized resellers and protect against distillation. The team has landed stronger mitigations since then and we've actually been meaning to take this down for a while. We merged the PR and this should be fully rolled back in tomorrow's release."

Anthropic has stated that unauthorized resellers have been selling access to Claude accounts and subscriptions at steep discounts in certain markets. The company has also publicly documented large-scale efforts by Chinese AI labs to distill its models by querying them at high volume through proxies and fraudulent accounts.

Anthropic removed the detection logic shortly after it became public.

Alibaba Bans Claude Code For Employees

The disclosure prompted a swift response from Chinese technology giant Alibaba. According to internal documents reported by the South China Morning Post, Alibaba added Claude Code to its list of high-risk software and instructed employees to stop using it for work, effective around July 10. The memo cited "back-door risks" following the discovery of the hidden markers.

Alibaba has not publicly commented on Anthropic's earlier accusations that its Qwen models benefited from large-scale distillation of Claude.

The Wider Context: Distillation And Geopolitical Competition

Model distillation - training a new model on the outputs of a more capable one - is a common technique in AI development. However, Anthropic and other U.S. frontier labs argue that industrial-scale distillation campaigns by foreign entities, particularly Chinese labs, undermine export controls and intellectual property protections.

Anthropic has previously published details of what it described as distillation operations targeting its models by labs including DeepSeek, Moonshot, and MiniMax. Chinese researchers have also published work showing that many leading Chinese models carry detectable signatures consistent with distillation from U.S. systems.

In this environment, companies like Anthropic face pressure to protect their models while maintaining user trust - especially in tools like Claude Code, which are granted significant access to users' local machines, files, and command execution.

Thereallo's analysis raises obvious questions about transparency. While the feature wasn't designed to steal user data or take control of anyone's computer, hiding this kind of tracking inside the system prompt without telling anyone erodes the trust these coding tools depend on.

"Coding agents already live on the wrong side of a scary boundary," Thereallo wrote. "Hiding the signal in the system prompt makes every other privacy claim harder to believe."

Anthropic has not issued a detailed public postmortem on the experiment. The company has emphasized that distillation attacks and account abuse pose risks to model safety standards and U.S. technological leadership, and that it continues to work with government and industry partners on mitigation strategies.

Tyler Durden Tue, 07/07/2026 - 17:20

Activists Push California To Recognize 'Black English' In Preschool Classrooms

Via American Greatness,

Progressive California education activists are urging the state to recognize “black English” in preschool classrooms, claiming the approach would strengthen literacy development and affirm the language spoken by many black children.

Black Californians United for Early Care & Education (BlackECE), a nonprofit advocacy organization, is promoting what it describes as an effort to challenge “harmful language hierarchies and affirm black English as a legitimate, rule-governed language rooted in black history, culture, and community.”

The group also seeks to “address how language bias shows up in early learning spaces–and how it can be dismantled.”

Ashley Williams, a co-founder of BlackECE, said the initiative is intended to ensure children feel their voices are respected regardless of how they speak.

“I don’t want my son to walk into any room and feel like his voice is not valued or his perspective can’t be heard because he’s not saying it one way or the other,” Williams told PBS.

Williams also reflected on her own experiences, saying speaking black English came with embarrassment because of its slang and grammatical differences.

She said she often felt pressure to “talk white” instead of speaking in the way that felt most natural to her.

BlackECE has developed a 10-point policy agenda focused on black children, families and educators, including proposals related to reparations and early childhood education.

The organization’s campaign follows California’s 2020 plan encouraging early dual-language learning and support for bilingual children. BlackECE argues that black English should also be recognized as part of those efforts.

“We talk about multilinguals, but we don’t include black children who may be African-American English speakers,” Xigrid Soto-Boykin, director of the Children’s Equity Project, said.

According to research cited from the National Library of Medicine, about 20 percent of American children and 44 percent of California children ages 5 to 17 are bilingual. The information also states that 89 percent of African Americans speak only English at home.

Tyler Durden Tue, 07/07/2026 - 17:00

The media savvy and gel-shellacked California governor — known for seeking out TV cameras and soliloquizing ad infinitum — has kept a noticeably lower profile since June 15, when he disclosed the Justice Department investigations.

The Lakers have found their backup big man to complement Walker Kessler.  The team has agreed to terms with Kevon Looney on a one-year deal.  The los Angeles Lakers have agreed to a one-year, $3.9 million contract with three time champion Kevon Looney in NBA free agency. Looney will join the Lakers on a one-year,...

The USMNT’s loss to Belgium delivered the biggest soccer audience in American television history.

The order generally requires agencies under the governor's authority to have employees in the office at least four days each week beginning July 1.

Ratajkowski said they they made "a huge improvement in the texture and tonal quality" of her skin.

Ratajkowski said they they made "a huge improvement in the texture and tonal quality" of her skin.

While warmer days are a welcome relief after brutal arctic temperatures of winter, not everyone looks forward to the dog days of summer.

Instead of jumping for joy, Argentina opted to throw their best player in the air.

The podcast host nearly followed in her longtime pal's Bravo footsteps, she told "Virtual Reali-Tea."

The podcast host nearly followed in her longtime pal's Bravo footsteps, she told "Virtual Reali-Tea."

For the first time in eons, the legendary game show “Jeopardy!” is hiring a new clue writer.

The state has a goal of expanding tribal stewardship over at least 7.5 million acres of lands and coastal waters in California.

Don’t tell me this wasn’t a failure.

“I’m not a threat to you at all. I’m very effeminate. I’m not a threat, OK? I’ll make her laugh, and then you finish the job.”

Many powerhouse banks bought up SpaceX at $135 a share during its historic IPO last month – and now they’re expecting the price to shoot up to $236 on average.

Dana Williamson, a former chief of staff to Gov. Gavin Newsom, will learn this fall whether she'll go to prison after pleading guilty in a corruption scheme that siphoned $225,000 from a campaign committee tied to Xavier Becerra, the Democratic frontrunner to succeed Newsom.

Oar you kidding.

Oakland police are desperately searching for a woman violently kidnapped on Friday last week.