Expired50% confidenceFactExact time
According to a discussion by Rohan Paul on X, this covert marking mechanism primarily targets non-default Anthropic Base URL routing and is only triggered when proxy settings are modified or a custom gateway is used.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/13/2026
First Seen
Valid until: 10/11/2026(expired)
Sources
The Claude Code Covert Tagging Scandal: The AI Trust Crisis Behind Alibaba's Ban
bilibili为什么叫QQ7/5/2026
Related Claims
Unverified在镜像站场景下，用户与代理服务器之间的HTTPS连接由代理方持有证书，代理可看到明文内容，端对端加密的安全假设失效62% similarUnverifiedThe issue exposed in Tenda routers this time is a hidden authentication mechanism at the firmware level, through which an attacker can gain control of the device by crafting specific requests.62% similarUnverifiedA prerequisite for exploiting this vulnerability is that the attacker already has a certain level of Tailscale network access, meaning they are already a legitimate but restricted member of the network.60% similarUnverifiedBlocking ugnas.com and its subdomains at the Pi-hole level can cut off the NAS's covert outbound connections58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/495707API
curl https://kongchang.com/api/v1/knowledge/claims/495707MCP
get_claim(id=495707)