Does that reliable work though? @wunderwuzzi23 has a trick where he has it run strings and grep to hide that it's accessing .env https://
embracethered.com/blog/posts/202
5/claude-code-exfiltration-via-dns-requests/
…

→ View original post on X — @simonw,