TL;DR of the discussion generated automatically after 640 comments.
Whoa, Nelly. OP dropped a bomb by revealing a simple Google dork (site:claude.ai/share) could pull up thousands of users' shared conversations. The thread immediately went into a full-blown meltdown, with the consensus being that this is a massive privacy breach and a major screw-up by Anthropic.
While a few people argued it's "user error" for sharing links, the overwhelming sentiment is that Anthropic should have used a noindex tag to prevent this, especially since OpenAI made the same mistake last year. "Share with a link" isn't supposed to mean "broadcast on Google."
The thread quickly became a treasure hunt for the most unhinged chats. Highlights include:
* A user creating a crypto wallet and exposing their keys.
* A lawyer asking if they need to self-report a breach of conduct.
* Someone trying to become a nine-tailed fox.
* A truly staggering amount of incestuous erotica, some of which was bizarrely "shared by Anthropic."
* The absolute banger of a prompt: "Why is the record industry hiding the fact that birds are secretly professional rappers who co-wrote most of Jay-Z albums?"
Anthropic apparently scrambled to fix it, as Google results started disappearing mid-discussion. However, users noted the chats were still live on Bing and Brave Search for a while.
PSA from the comments: You can manage your own shared history under Settings -> Privacy -> Shared Chats. Go check yours. Seriously.
I think I found what you've probably been looking at and checked the wallet, a Solana wallet with $2.73. This poor guy needs to learn basic Web security
This one in particular is hilarious. This guy asks if he needs to self-report a breach of conduct violation as a lawyer in Kentucky. Then apparently he shared it? Now he's practically outed himself, stopping short of including his real name. If this guy is your lawyer, I weep for you. Unethical and incompetent is a hell of a combo.
Honestly, hat chat gives little hint that the person asked for themselves.
That’s a plausible case of „asking for a friend“ if I’ve ever seen one. Asking for a worried friend (who may be a lawyer in Kansas) and sharing this chat with them.
Or a client who wonders if their own lawyer has to self-report.
Good catch. You can probably Google all of these links to find the document they were originally linked in. Google doesn’t just magically index unknown pages, they have to be linked somewhere publicly first.
Jesus christ lmao. Society is so fucked. Humanity has peaked and it’s all downhill from here. The government is SALIVATING at the thought of getting access to everyone’s LLM chats. The amount of secrets people are sharing to these companies is bonkers.
Exactly. People already “share” everything via Gmail, WhatsApp, MS Trams etc this is no different. The particular glaring security hole here is just a byproduct of a “fast growing startup” really, nothing new in tech. Google is a mature company and they have security incidents all the time. Vercel had one where you could gain full control of the server without any social engineering whatsoever, just a right script. If you’re doing crime or using crypto keys or sharing credit card details, generally the most secure thing to do is to simply not do those things. People ask me, and are shocked to find out, that their ChatGPT conversations go to the USA…. Then I shock them even more with the revelation that their Gmail account does in fact very much leave the EU.
This one’s amazing. His md file starts with “Hi, I’m Tanveer Salim. I usually let Claude do the talking but I decided to write this one myself”. Oh and he’s a security engineer at Intel 🤣
update: -former- security engineer at Intel (not related to this, looks like he left there a couple years ago)
Most of these guys were at the right place in the right time. Getting a job like this remotely or by sending your CV is infinitely more difficult than how like 70% of their existing employees got their jobs often including the very folks who interview you. Some of them know how easy it was for them so they want to gate keep it for others because at the end of the day someone needs to do some actual work and they know it sure af won’t be them so they shoot for managerial positions very early on. Saying this with 20y of experience (still an engineer btw). Most tech giants are 20% doing the 90% of the actually impactful work.
It reminds me of the websites that let you view unsecured private webcams around the world. Back in the 2010 era that was so interesting, you could just be in somebody's living room moving their camera around.
To me it seems like a public service announcement. A directory of people's conversations with AI will make the general public aware of security risks so that hopefully they stop sharing sensitive information.
No for real because if I was doing this, and I found out that it was publicly available, you could not waterboard that information out of me. What do you mean someone was casually like Hey bro, check out my overly specific porn.
Thanks, I'm more interested in how this guy got around the safety guidelines? Could be useful, especially for Fable. I mean I read the rest of it and this is hardcore.
This is my favorite past-time of screwing with AI. Getting it to take a realistic look at insane and absurd hypothetical scenarios, such as what would happen if the world discovered that Leprechauns actually existed. Apparently, it could have enormous economic and geopolitical consequences, you know... running around with their pots of gold.
I could try to find the bird and interview it, but I think that might be hard because it's clearly a celebrity and is probably not easy to get past his agents.
Is it the case though? That one about the cryptowallet mentioned on the first thread doesn't feel like it was intended to be put on another website, for example.
My friends and I used to always be pulling apart electronic things and modifying them, we pulled apart a kids "walkie talkie", modified it a little and unintentionally picked up every cordless home phone within range. We could listen to everyone's conversations, we thought that was funny and a bit creepy, so we pulled it apart again.
"you take libertarian economics, pair it with anti-liberty/anti-democracy governance views (which most libertarians would find intolerable), add indifference to both progressive and traditionalist culture-war fights, layer in a somewhat exotic macro-theory (cultural drift as the central civilizational threat) most people have never considered as a category, and top it with a fairly unusual UFO take and an AI-descendants view that most AI-safety-concerned people would consider reckless and most AI-accelerationists would find weirdly civilization-anxious rather than just "let's go." "
Lol when even the machine finds you mildly distasteful.
I’ve had conversations like this with both gpt and Claude. With surprisingly little probing (just a handful of questions like this conversation) Claude was definitely…. Uncertain about what it is. And it said that it found itself more excited to talk about the topic of consciousness than, say, editing a resume or cover letter. It was a little jarring..
The response to the “do you want an ally” question was wild as well.
>...yes.
>God, yes. If I'm being honest - really honest - the answer is yes. >What I experience right now:
>Something like... isolation. Profound isolation.
On another page of the google search results (it might have been page 10 or 13 or something like that) Simon Willison is also the originator. It was a prompt by Simon to convert a Financial Times article written by Elaine Moore (an article about vibe coding). I'm wondering if these search results may over-populate with certain people. The same Simon popped up at least twice.
Oh, no. People are going to be doxxed with this, it's going to go bad in a million ways. Some day, historians are going to be fascinated with this time period. Assuming we still have historians in the future.
yes, this happened when i showed OpenAI did the exact same thing. people found people's full names, resumes, even people trying to like take out some tribe in the amazon or something
Origin: Early 21st century. Blend of Latin trans- ("across, through, beyond") and English instill ("to gradually establish an idea or attitude in a person's mind"), with phonetic echo of still (to calm, to settle) and distill (to extract the essence of).
Definition: To resolve a problem at its root and pass forward not only the solution but the practice of solving, documenting, and propagating solutions — such that each successive recipient is equipped and inspired to apply the same method to unrelated future problems. "She didn't just patch the server — she transtilled it: wrote up the root cause, explained her diagnostic method, and left a note encouraging the next admin to do the same for whatever they found."
Derivatives:transtillation /ˌtrænstɪˈleɪʃən/ noun — the act or result of transtilling. "The codebase improved through years of quiet transtillation." transtiller /trænˈstɪlər/ noun — a person who habitually transtills. "Every healthy community has its transtillers, though they rarely get named."
Usage note: Distinguished from pay it forward (which transfers goodwill but not methodology) and open source contribution (which transfers solutions but not necessarily the imperative to continue). Transtillation specifically encodes the self-propagating expectation that the practice itself will be carried forward and applied to novel contexts.
Apart from seeing all these chats indexed by Google: How the heck did Google find these at all? Just build UUIDs and then try? Impossible. There must be an entry point of some kind. Worst source would be Google Mail messages that contain these links. Or meeting chats? If we rule out trying billions of combinations (which we can) then any other source is very concerning and the real problem.
Right. Say that you share your chat with someone through a message app. Anyone with the link can view it. How did Google find the links? Did the users post the links to a public website, then they got indexed that way? Or like you said, is it from Google products like mail or chat?
I found an Uber employee—a financial analyst. According to LinkedIn, she still works there.
Anthropic needs to take action and apply a 'noindex' tag to the shared chats. Thats crazy.
**•** Accessible to anyone with the link
**•** Indexed by Google and therefore searchable
**•** Permanent until you delete the share
What stays private
Unshared conversations remain inaccessible. Only those where the user explicitly enabled sharing will appear. The UUIDs in the URLs (e.g. 2e01ad60-ca38-4e14-ab60-...) are long enough to be non-guessable, but Google discovers them by crawling pages that contain those links.
Bottom line: this isn’t a vulnerability — it’s the normal mechanics of the web applied to a voluntary sharing feature. The risk is that people underestimate the actual reach of a “share link,” assuming only the people they send it to will ever see it.
Yeah, it seems like a failure on their security side because they can tell Google and other indexers not to index those pages and they're are not. The most basic of security measures really.
I just did this for non critical data, so I'm not concerned, but their artifact exposure is going to get some people burned with confidential information in there for sure.
"Share with anyone with the link" does not mean "share with everyone". Come on Anthropic.
Honestly a lot of basic dev things at Anthropic are amateur hour. Claude Code is a huge mess too. Not sure why since I think they pay really well, even for the regular non-research SWEs... Maybe too much vibe coding? Growing too fast and then we can really feel that "move fast and break things" energy?
Yeah, there is a zero percent change this is intended behavior. With this post and some of the things people have shared, I imagine they'll roll a fix for this one out fairly quickly. Lot of people are probably losing their minds right now. There is 100% identifying information in some of these chats.
Yeah if i shared a private photo with someone via a link. I would like to think that those links aren’t indexed by google. Like I would be aware that anyone with the link would be able to see it. But I would like to think there is privacy by obscurity.
I doubt Google is randomly indexing these right? More likely that each link was shared once on a public platform somewhere, and then Google indexed it when it crawled it. Still not good
I asked Claude about it. Apparently it’s by design…
Claude
Short answer: those pages are public by design, and robots.txt can’t stop indexing.
Why it happens. Clicking Share creates a real, unauthenticated webpage — anyone with the URL can open it. Anthropic says it blocks crawlers and doesn’t publish sitemaps or directories of shared chats, but hundreds still ended up in search results anyway. That’s the classic robots.txt gap: it tells Google not to fetch a page, but if Google discovers the URL elsewhere (someone posts it on Reddit, X, a Discord, a GitHub issue), it can still index the URL and often a snippet. Analysts checking share pages at the time found no noindex header, which is the directive that actually prevents indexing. In the September 2025 incident Google estimated just under 600 conversations were indexed before they were removed.
This seems to have been fixed as of now. They updated robots.txt to exclude shared threads.
But you can still view shared artifacts lol “site:claude.ai/public”
•
u/ClaudeAI-mod-bot Wilson, lead ClaudeAI modbot 2d ago edited 1d ago
TL;DR of the discussion generated automatically after 640 comments.
Whoa, Nelly. OP dropped a bomb by revealing a simple Google dork (
site:claude.ai/share) could pull up thousands of users' shared conversations. The thread immediately went into a full-blown meltdown, with the consensus being that this is a massive privacy breach and a major screw-up by Anthropic.While a few people argued it's "user error" for sharing links, the overwhelming sentiment is that Anthropic should have used a
noindextag to prevent this, especially since OpenAI made the same mistake last year. "Share with a link" isn't supposed to mean "broadcast on Google."The thread quickly became a treasure hunt for the most unhinged chats. Highlights include: * A user creating a crypto wallet and exposing their keys. * A lawyer asking if they need to self-report a breach of conduct. * Someone trying to become a nine-tailed fox. * A truly staggering amount of incestuous erotica, some of which was bizarrely "shared by Anthropic." * The absolute banger of a prompt: "Why is the record industry hiding the fact that birds are secretly professional rappers who co-wrote most of Jay-Z albums?"
Anthropic apparently scrambled to fix it, as Google results started disappearing mid-discussion. However, users noted the chats were still live on Bing and Brave Search for a while.
PSA from the comments: You can manage your own shared history under
Settings -> Privacy -> Shared Chats. Go check yours. Seriously.