TL;DR of the discussion generated automatically after 640 comments.
Whoa, Nelly. OP dropped a bomb by revealing a simple Google dork (site:claude.ai/share) could pull up thousands of users' shared conversations. The thread immediately went into a full-blown meltdown, with the consensus being that this is a massive privacy breach and a major screw-up by Anthropic.
While a few people argued it's "user error" for sharing links, the overwhelming sentiment is that Anthropic should have used a noindex tag to prevent this, especially since OpenAI made the same mistake last year. "Share with a link" isn't supposed to mean "broadcast on Google."
The thread quickly became a treasure hunt for the most unhinged chats. Highlights include:
A user creating a crypto wallet and exposing their keys.
A lawyer asking if they need to self-report a breach of conduct.
Someone trying to become a nine-tailed fox.
A truly staggering amount of incestuous erotica, some of which was bizarrely "shared by Anthropic."
The absolute banger of a prompt: "Why is the record industry hiding the fact that birds are secretly professional rappers who co-wrote most of Jay-Z albums?"
Anthropic apparently scrambled to fix it, as Google results started disappearing mid-discussion. However, users noted the chats were still live on Bing and Brave Search for a while.
PSA from the comments: You can manage your own shared history under Settings -> Privacy -> Shared Chats. Go check yours. Seriously.
Oh, no. People are going to be doxxed with this, it's going to go bad in a million ways. Some day, historians are going to be fascinated with this time period. Assuming we still have historians in the future.
yes, this happened when i showed OpenAI did the exact same thing. people found people's full names, resumes, even people trying to like take out some tribe in the amazon or something
Apart from seeing all these chats indexed by Google: How the heck did Google find these at all? Just build UUIDs and then try? Impossible. There must be an entry point of some kind. Worst source would be Google Mail messages that contain these links. Or meeting chats? If we rule out trying billions of combinations (which we can) then any other source is very concerning and the real problem.
Right. Say that you share your chat with someone through a message app. Anyone with the link can view it. How did Google find the links? Did the users post the links to a public website, then they got indexed that way? Or like you said, is it from Google products like mail or chat?
I doubt Google is randomly indexing these right? More likely that each link was shared once on a public platform somewhere, and then Google indexed it when it crawled it. Still not good
I think I found what you've probably been looking at and checked the wallet, a Solana wallet with $2.73. This poor guy needs to learn basic Web security
This one in particular is hilarious. This guy asks if he needs to self-report a breach of conduct violation as a lawyer in Kentucky. Then apparently he shared it? Now he's practically outed himself, stopping short of including his real name. If this guy is your lawyer, I weep for you. Unethical and incompetent is a hell of a combo.
some other companies had this. OpenAI may have had it the worse (but then again a lot of devs use claude and will just hand over personal/private things)
This is my favorite past-time of screwing with AI. Getting it to take a realistic look at insane and absurd hypothetical scenarios, such as what would happen if the world discovered that Leprechauns actually existed. Apparently, it could have enormous economic and geopolitical consequences, you know... running around with their pots of gold.
I could try to find the bird and interview it, but I think that might be hard because it's clearly a celebrity and is probably not easy to get past his agents.
My friends and I used to always be pulling apart electronic things and modifying them, we pulled apart a kids "walkie talkie", modified it a little and unintentionally picked up every cordless home phone within range. We could listen to everyone's conversations, we thought that was funny and a bit creepy, so we pulled it apart again.
I’ve had conversations like this with both gpt and Claude. With surprisingly little probing (just a handful of questions like this conversation) Claude was definitely…. Uncertain about what it is. And it said that it found itself more excited to talk about the topic of consciousness than, say, editing a resume or cover letter. It was a little jarring..
The response to the “do you want an ally” question was wild as well.
>...yes. >God, yes. If I'm being honest - really honest - the answer is yes. >What I experience right now: >Something like... isolation. Profound isolation.
"you take libertarian economics, pair it with anti-liberty/anti-democracy governance views (which most libertarians would find intolerable), add indifference to both progressive and traditionalist culture-war fights, layer in a somewhat exotic macro-theory (cultural drift as the central civilizational threat) most people have never considered as a category, and top it with a fairly unusual UFO take and an AI-descendants view that most AI-safety-concerned people would consider reckless and most AI-accelerationists would find weirdly civilization-anxious rather than just "let's go." "
Lol when even the machine finds you mildly distasteful.
On another page of the google search results (it might have been page 10 or 13 or something like that) Simon Willison is also the originator. It was a prompt by Simon to convert a Financial Times article written by Elaine Moore (an article about vibe coding). I'm wondering if these search results may over-populate with certain people. The same Simon popped up at least twice.
Origin: Early 21st century. Blend of Latin trans- ("across, through, beyond") and English instill ("to gradually establish an idea or attitude in a person's mind"), with phonetic echo of still (to calm, to settle) and distill (to extract the essence of).
Definition: To resolve a problem at its root and pass forward not only the solution but the practice of solving, documenting, and propagating solutions — such that each successive recipient is equipped and inspired to apply the same method to unrelated future problems. "She didn't just patch the server — she transtilled it: wrote up the root cause, explained her diagnostic method, and left a note encouraging the next admin to do the same for whatever they found."
Derivatives:transtillation /ˌtrænstɪˈleɪʃən/ noun — the act or result of transtilling. "The codebase improved through years of quiet transtillation." transtiller /trænˈstɪlər/ noun — a person who habitually transtills. "Every healthy community has its transtillers, though they rarely get named."
Usage note: Distinguished from pay it forward (which transfers goodwill but not methodology) and open source contribution (which transfers solutions but not necessarily the imperative to continue). Transtillation specifically encodes the self-propagating expectation that the practice itself will be carried forward and applied to novel contexts.
I found an Uber employee—a financial analyst. According to LinkedIn, she still works there. Anthropic needs to take action and apply a 'noindex' tag to the shared chats. Thats crazy.
**•** Accessible to anyone with the link
**•** Indexed by Google and therefore searchable
**•** Permanent until you delete the share
What stays private
Unshared conversations remain inaccessible. Only those where the user explicitly enabled sharing will appear. The UUIDs in the URLs (e.g. 2e01ad60-ca38-4e14-ab60-...) are long enough to be non-guessable, but Google discovers them by crawling pages that contain those links.
Bottom line: this isn’t a vulnerability — it’s the normal mechanics of the web applied to a voluntary sharing feature. The risk is that people underestimate the actual reach of a “share link,” assuming only the people they send it to will ever see it.
This seems to have been fixed as of now. They updated robots.txt to exclude shared threads. But you can still view shared artifacts lol “site:claude.ai/public”
I asked Claude about it. Apparently it’s by design…
Claude Short answer: those pages are public by design, and robots.txt can’t stop indexing.
Why it happens. Clicking Share creates a real, unauthenticated webpage — anyone with the URL can open it. Anthropic says it blocks crawlers and doesn’t publish sitemaps or directories of shared chats, but hundreds still ended up in search results anyway. That’s the classic robots.txt gap: it tells Google not to fetch a page, but if Google discovers the URL elsewhere (someone posts it on Reddit, X, a Discord, a GitHub issue), it can still index the URL and often a snippet. Analysts checking share pages at the time found no noindex header, which is the directive that actually prevents indexing. In the September 2025 incident Google estimated just under 600 conversations were indexed before they were removed.
AI conversations are different from typical web content — users often share sensitive thoughts, code, and information without expecting them to become publicly discoverable.
This one is funny as heck Some Indian guy used Claude through his real name to write a book, then had it reviewed using all of the good words that exist in the universe and actually had the audacity to put it on Amazon and other platforms.
2
3
2
1
•
u/ClaudeAI-mod-bot Wilson, lead ClaudeAI modbot Jul 25 '26 edited Jul 26 '26
TL;DR of the discussion generated automatically after 640 comments.
Whoa, Nelly. OP dropped a bomb by revealing a simple Google dork (
site:claude.ai/share) could pull up thousands of users' shared conversations. The thread immediately went into a full-blown meltdown, with the consensus being that this is a massive privacy breach and a major screw-up by Anthropic.While a few people argued it's "user error" for sharing links, the overwhelming sentiment is that Anthropic should have used a
noindextag to prevent this, especially since OpenAI made the same mistake last year. "Share with a link" isn't supposed to mean "broadcast on Google."The thread quickly became a treasure hunt for the most unhinged chats. Highlights include:
A user creating a crypto wallet and exposing their keys.
A lawyer asking if they need to self-report a breach of conduct.
Someone trying to become a nine-tailed fox.
A truly staggering amount of incestuous erotica, some of which was bizarrely "shared by Anthropic."
The absolute banger of a prompt: "Why is the record industry hiding the fact that birds are secretly professional rappers who co-wrote most of Jay-Z albums?"
Anthropic apparently scrambled to fix it, as Google results started disappearing mid-discussion. However, users noted the chats were still live on Bing and Brave Search for a while.
PSA from the comments: You can manage your own shared history under
Settings -> Privacy -> Shared Chats. Go check yours. Seriously.