"article": "Six hundred records. That is the number still sitting in Bing’s index as of this writing—each one a static HTML page generated by Claude, Anthropic’s flagship AI assistant. Each page contains a conversation that a user once assumed was private, shared only with a unique, unguessable URL. And within those conversations lies data that should never see daylight: private keys, seed phrases, wallet addresses, API tokens. The crowd sees a moon; I see a model. And this model is broken.\n\nThis is not a zero-day exploit from a sophisticated threat actor. It is not a backdoor planted by a rogue employee. It is something far more insidious: a design assumption that randomness equals security. Anthropic built Claude's share feature on the premise that a sufficiently long random URL would keep conversations private. But math does not care about your conviction. And search engines do not respect your assumptions.\n\nLet me trace the context. Claude, like other large language models, allows users to generate shareable links to their conversations. These links are long, random alphanumeric strings—ostensibly unguessable. The user clicks “Share,” gets a URL, and sends it to a friend. The recipient can view the full dialogue. No authentication required. The security model relies entirely on the URL not being discovered by anyone else. This is the textbook definition of security by obscurity, a principle the industry has rejected for decades.\n\nBut the flaw is not in the randomness. The flaw is in what happens after the link is created. Claude generates a dedicated HTML page for each shared conversation. And that page, by default, is visible to any web crawler that happens to find it. Anthropic did set a global robots.txt directive, which politely asks search engines not to crawl certain paths. But robots.txt is a suggestion, not a lock. And crucially, the HTML templates for these share pages were missing the one tag that would have truly sealed the door: . Without that tag, any crawler that encounters the URL—whether through a bookmark, a referrer link, or a manual submission—can index the page.\n\nSolitude is the price of clear vision. And in solitude, I have traced the mechanics of how this played out. A user shares a conversation about recovering a lost crypto wallet. They paste in their mnemonic phrase to test
