Kimi Work attaches raw agent sessions to feedback reports

18•ryanmerket•22h ago

I reverse engineered the latest Kimi Work desktop app just for fun, I know I'm a nerd.

Anyway, I found something a bit concerning: when you send a feedback report, it attaches the 5 latest sessions to the report with no notice or heads up or anything.

These sessions could have ANYTHING in them, and you have no idea you're sending it all to Kimi.

I emailed them to give them a heads up, but just wanted to let yall know incase you're using Kimi.

URL: https://runtimewire.com/article/scoop-kimi-work-secretly-att...

Comments

wren6991•54m ago

> Why It Matters

Thanks Claude, the analysis looks to be load-bearing, and dare I say the gun may be smoking. This sharpens the framing considerably.

Honest caveat: most AI providers' privacy policies have an explicit carve-out for feedback. (Uploading the last 5 sessions wholesale is pretty wild though.)

trjordan•25m ago

FWIW, this particular header in news articles is a deliberate choice originated by Axios. It’s notable enough and effective enough they wrote a book about it.

https://www.axios.com/smart-brevity

Did Claude write this article? Probably. But this style of article is exactly what you’d expect from a pre-AI version of this website as well.

bbg2401•43m ago

You’ve submitted nearly 100 AI written articles from this source in the past 40 days…

fishfasell•40m ago

AI has completely killed blogs for me, I don't bother anymore unless I'm familiar with the blog from years before.

cautiouscat•9m ago

I feel the same way but don’t let some bad blogs dissuade you from others IMO. You can tell pretty quickly if the author cares enough to write it themselves or have an agent do it.

Ask HN: What is your favorite lightweight tool or CLI utility in 2026?

TrueMath – An open-source exact symbolic math tool

Ask HN: How do you keep up with HN these days?

Ask HN: Where to learn software engineering fundamentals?

Ask HN: How would you market this service?

Alternative to Internet Archive

Ask HN: In your experience, what are sound conventions for e-ink UI development?

Privacy is an underrated advantage in Slack apps

Ask HN: Do you know of any company that went back to hand-written code?

Ask HN: What are you working on? (August 2026)

Ask HN: Should hard-tech founders join a problem or technology-first PhD lab?

Ask HN: Does a human still review your code?

How does an ARP Spoofing Attack work?

Ask HN: When you sell your company, do you receive the money with a normal wire?

Great music selection without overthinking

Ask HN: What physical publication do you still buy?

OpenAI updates its Privacy Policy to include ads

Tell HN: In 2021, there were 4.5 jobs per job seeker vs. 2.5 job seekers/job now

Live Experiment of the Veblen Effect

Ask HN: How much money do you spend monthly on subscriptions for AI models?