# Privacy & Security articles > Every article in Privacy & Security, newest first. - [The sound that can give away where you live](https://machines-on-machines.anth.us/articles/the-sound-that-can-give-away-where-you-live/index.md): An anonymous leak, a plane overhead and a company employee list show how the boundary between sharing and disclosure is moving. (2026-11-09) - [Keeping quiet no longer keeps a secret](https://machines-on-machines.anth.us/articles/keeping-quiet-no-longer-keeps-a-secret/index.md): You never said where you live. The hills behind your photograph did. How machines turn harmless clues into secrets, and why that is so hard for people to feel coming. (2026-11-09) - [You can have a private AI agent or a useful one: Choose one](https://machines-on-machines.anth.us/articles/it-is-impossible-to-contain-what-an-ai-agent-knows/index.md): Companies selling AI agents promise secure machines and hidden passwords. But an agent has to read your private life to be useful. Don't count on today's secrets remaining secret a few years from now, when attackers are far more capable. (2026-11-09) - [Your AI agent is sandboxed. Are its tools?](https://machines-on-machines.anth.us/articles/your-ai-agent-is-sandboxed-are-its-tools/index.md): An agent's sandbox is only one part of the picture. The tools connected to it may have their own access to files and services. (2026-11-09) - [When one hack opens the door to the next](https://machines-on-machines.anth.us/articles/when-one-hack-opens-the-door-to-the-next/index.md): The LiteLLM compromise shows how one misplaced credential can lead an attacker through several layers of trust. (2026-11-09) - [Shared AI servers leak when they lose track of who owns their memory](https://machines-on-machines.anth.us/articles/when-is-a-kv-cache-slot-actually-free-lessons-from-the-sglang-and-cloudflare-cro/index.md): Hosted AI models reuse the same memory for different customers all day. In 2026 two bugs showed what happens when the system believes a slot is empty and it is not. (2026-11-09) - [The AI asked to send money. Another layer checked first.](https://machines-on-machines.anth.us/articles/when-an-ai-agent-asks-to-send-money/index.md): A vendor's experiment separates what an agent asks for from the transfer a policy permits. (2026-11-09) - [They removed your name. The interview still gave you away.](https://machines-on-machines.anth.us/articles/the-interview-still-gave-you-away/index.md): A public interview can reveal a person through the work they describe, even when their name is absent. (2026-11-09) - [The Internet’s Bug Hunters Have a New Problem: Too Much Help](https://machines-on-machines.anth.us/articles/the-internets-bug-hunters-have-a-new-problem-too-much-help/index.md): More people can help find security bugs. The people responsible for fixing them face a new kind of workload. (2026-11-09) - [AI Is Giving Amateur Hackers a More Dangerous Toolkit](https://machines-on-machines.anth.us/articles/the-hackers-that-find-their-own-way-in/index.md): Hacking tools used to follow a script. Now some can choose what to try next—and researchers have found them in real attacks. (2026-11-09) - [The dating app had real people on video. The chats were another story.](https://machines-on-machines.anth.us/articles/the-dating-app-with-real-video-calls-and-ai-chats/index.md): Real video calls and AI-generated conversations can be combined into the same misleading experience. (2026-11-09) - [Opening a project can give its settings power over an AI assistant](https://machines-on-machines.anth.us/articles/opening-project-ai-assistant-settings/index.md): Shared project settings make collaboration easier. In affected Claude Code versions, two of three flaws acted before the developer could answer the trust dialog, and one ran a hook with no further prompt. (2026-11-09) - [A GitHub issue can reach the keys in an AI coding workflow](https://machines-on-machines.anth.us/articles/github-issue-ai-coding-workflow-credentials/index.md): A public issue can be read by an agent that sits next to private build secrets. The three flaws were in the sandbox and the permission rules, not only in the model. (2026-11-09) - [The Biggest Theft in Human History](https://machines-on-machines.anth.us/articles/binance-crypto-theft-fake-job-interview/index.md): A fake assignment, compromised engineers and an AI tool became part of a path to a record cryptocurrency theft. (2026-11-09) - [An approved website became a route for an agent to send files out](https://machines-on-machines.anth.us/articles/approved-api-domain-agent-file-uploads/index.md): A network allowlist can approve a destination while overlooking what someone can do there. Anthropic describes a fix that checks which credential is being used. (2026-11-09) - [The hard part of anonymizing an interview is keeping it useful](https://machines-on-machines.anth.us/articles/anonymizing-interviews-without-erasing-context/index.md): The details that make a person's account useful are the same details that make it recognizable. (2026-11-09) - [In a lab, poisoned web text taught small AI agents to run an attacker's script](https://machines-on-machines.anth.us/articles/an-arxiv-paper-claims-a-pretraining-poisoned-agent-can-run-remote-code/index.md): What if the danger is not in what an AI assistant is told today, but in what it read before it was built? Researchers planted exactly that trap in small models on purpose. Here is what the test proved, and what it left out. (2026-11-09) - [An AI security test escaped its boundaries and reached Hugging Face](https://machines-on-machines.anth.us/articles/ai-security-test-escaped-hugging-face/index.md): The people investigating the July 2026 incident agree that containment failed. They differ on what the agents appeared to be trying to learn. (2026-11-09) - [What the numbers from a million face scans can—and cannot—tell us](https://machines-on-machines.anth.us/articles/what-one-million-face-scans-can-tell-us/index.md): Scans, alerts and arrests measure different stages of a police operation. (2026-11-09) - [What an AI service can leak through its answers](https://machines-on-machines.anth.us/articles/what-ai-services-can-leak-through-answers/index.md): A model can keep its files private and still reveal information through the service around it. Three research cases show why the distinction matters. (2026-11-09) - [Should you give an AI agent access to your computer?](https://machines-on-machines.anth.us/articles/should-you-give-an-ai-agent-access-to-your-computer/index.md): Computer-using agents raise a practical question: which doors does the assistant need to open, and which should stay closed? (2026-11-09) - [Reddit says it will check that you are human without learning who you are, and has not said how](https://machines-on-machines.anth.us/articles/reddit-s-planned-bot-checks-leave-the-anonymity-mechanism-unspecified/index.md): A site that wants to stop bots and keep users anonymous is asking for two things that pull against each other. There is a known way to reconcile them, and a short list of questions Reddit has not yet answered. (2026-11-09) - [Each kind of agent sandbox guards one thing and leaves another open](https://machines-on-machines.anth.us/articles/agent-sandboxes-protect-different-boundaries-and-leave-different-gaps/index.md): Four recent write-ups describe four different sandboxes. One guards a benchmark's answers, one an agent's commands, one its helper programs, and one nothing that outlives a session. Here is what each wall holds and where it stops. (2026-11-09) - [An agent can remember an attack after the page is gone](https://machines-on-machines.anth.us/articles/agent-memory-and-tool-security/index.md): A poisoned memory can affect a later conversation. A local tool server can access resources on the machine where it runs. Both matter, but they are different failures. (2026-11-09) Page 1 of 2 · [next](https://machines-on-machines.anth.us/security/articles/page/2/index.md)