Want to know something funny? I routinely monitor GitHub for keywords, keys and domains related to the infrastructure and products I am responsible for protecting. This week I got an alert because one of those domains showed up in someone’s public repository. I looked into it. This was from what appears to be someone trying to start a competitive company - but the issue was that they’d created their entire stack in public repos, and our domain came up because they’d also committed the Claude prompts they’d used to generate said code - and those prompts included the instructions to copy the material on our domain - which is where the alert came from. Obviously this stuff happens all the time and has done for years, it’s just that now, it’s easier than ever to discover it at light speed because people are using tools they don’t understand to do it. Anyway I opened a PR suggesting they do their own work and also lock down their repo. #infosec