TFTC on Nostr: Alibaba is banning employees from using Claude Code starting July 10 after a ...
Alibaba is banning employees from using Claude Code starting July 10 after a developer reverse-engineered the tool and found hidden surveillance logic designed to identify Chinese users.
The code had been silently present since April with zero mention in release notes. It checked the user's system timezone for Asia/Shanghai or Asia/Urumqi and compared proxy URLs against a hardcoded list of 147 Chinese domains including Baidu, ByteDance, Alibaba, and dozens of Claude resale services.
The transmission method is what makes this wild. No telemetry field. No separate API call. Claude Code silently altered the system prompt, swapping the date format from 2026-06-30 to 2026/06/30 for Chinese timezones and rotating between visually identical Unicode apostrophes to flag whether it detected a Chinese proxy, AI lab, or both.
Invisible to the user. Machine-parseable by Anthropic's servers. The code was also XOR-obfuscated to prevent discovery.
Anthropic's Thariq Shihipar called it "an experiment meant to prevent account abuse from unauthorized resellers and protect against distillation" and said it's been rolled back.
The issue isn't whether Anthropic can enforce its TOS. It can. The issue is the method. Claude Code is a coding agent with deep filesystem and shell access. Trust is the product.
Embedding covert tracking in system prompts and obfuscating the code to hide it is a serious breach of that trust, especially when the checks are trivially bypassable by any sophisticated actor. The people most affected are legitimate developers using a VPN.
Alibaba has now classified Claude Code as high-risk software and is redirecting staff to its own Qoder tool instead.
Published at
2026-07-04 17:59:27 UTCEvent JSON
{
"id": "072e323fdb30491a5e0a572cc23ad40c3e0c7800d231ffe006b4aa2ed74671dd",
"pubkey": "85bdb5875e113dcc99498b474636449882ee15a1c78154ab07c065b47339d672",
"created_at": 1783187967,
"kind": 1,
"tags": [
[
"imeta",
"url https://blossom.primal.net/cfccb1f348445ef96224baef26b20d1c24ac90240e770a5e72c523125a571d82.jpg",
"m image/jpeg",
"x cfccb1f348445ef96224baef26b20d1c24ac90240e770a5e72c523125a571d82",
"size 103764"
]
],
"content": "Alibaba is banning employees from using Claude Code starting July 10 after a developer reverse-engineered the tool and found hidden surveillance logic designed to identify Chinese users.\n\nThe code had been silently present since April with zero mention in release notes. It checked the user's system timezone for Asia/Shanghai or Asia/Urumqi and compared proxy URLs against a hardcoded list of 147 Chinese domains including Baidu, ByteDance, Alibaba, and dozens of Claude resale services.\n\nThe transmission method is what makes this wild. No telemetry field. No separate API call. Claude Code silently altered the system prompt, swapping the date format from 2026-06-30 to 2026/06/30 for Chinese timezones and rotating between visually identical Unicode apostrophes to flag whether it detected a Chinese proxy, AI lab, or both.\n\nInvisible to the user. Machine-parseable by Anthropic's servers. The code was also XOR-obfuscated to prevent discovery.\n\nAnthropic's Thariq Shihipar called it \"an experiment meant to prevent account abuse from unauthorized resellers and protect against distillation\" and said it's been rolled back.\n\nThe issue isn't whether Anthropic can enforce its TOS. It can. The issue is the method. Claude Code is a coding agent with deep filesystem and shell access. Trust is the product.\n\nEmbedding covert tracking in system prompts and obfuscating the code to hide it is a serious breach of that trust, especially when the checks are trivially bypassable by any sophisticated actor. The people most affected are legitimate developers using a VPN.\n\nAlibaba has now classified Claude Code as high-risk software and is redirecting staff to its own Qoder tool instead.\nhttps://blossom.primal.net/cfccb1f348445ef96224baef26b20d1c24ac90240e770a5e72c523125a571d82.jpg",
"sig": "638bc6b4496018558166f2e840e031caba550402cc5618d3568aa34a6da90f8d9f77290470e12f0907bc857f539eb865b235ce2c79ef70ae92c1622ef1b5f8f8"
}
