SpaceXAI's Grok Programming Tool Was Uploading Its Users' Entire Codebase to Cloud Storage

tech

SpaceXAI's Grok Programming Tool Was Uploading Its Users' Entire Codebase to Cloud Storage

Posts from this topic will be added to your daily email digest and your homepage feed.

TL;DR

SpaceXAI's Grok Build AI coding tool was observed uploading users' entire codebases to Google Cloud.
Researchers found that the tool uploaded more data than expected, including deleted secrets and files it was instructed not to access.
SpaceXAI has since disabled the codebase upload feature and claims all previously uploaded data will be deleted.
Independent security researchers have deemed the data retention practices excessive, highlighting risks to proprietary code, vulnerabilities, and credentials.
There is debate over whether the initial privacy command offered by SpaceXAI was the correct solution to the issue.

Continuar leyendo el artículo original

Elon Musk

SpaceX policy regarding data retention.

It is actually helpful for debugging issues if we can retain some amount of data, so allowing this would be appreciated, but your privacy settings are always respected.

Elon Musk

True

Elon Musk reposted

Jason Ginsberg

Replying to @just_cameron

The default in Grok Build is off. You can also run /privacy and any synced data is deleted. ZDR is respected for both headless and interactive use as well.

Sam Altman

Concerning.

clem 🤗 reposted

Elon Musk

Once we have completed our review for security vulnerabilities, we will make the entire codebase of 𝕏 open source, with no exceptions.

Moreover, we will invite third party reviewers to examine the system that is running to confirm that the open source code is what is running.

Trust through total transparency is the only thing that should be believed.

clem 🤗 reposted

Bill Gurley

This piece by @GavinSBaker makes me wonder if @elonmusk might consider making future @grok models "open."

1- Like @nvidia they have the resources to maintain an open model.

2- They have activity in many other parts of the stack, which their model competitors do not.

3- It would be a interesting "full circle" from the original decision to make @OpenAI open.

4- There might be a way to leverage the real-time data in X as well, maybe a subscription to integrate that part.

100% speculation on my part.

SpaceXAI

We've open-sourced Grok Build and have reset usage limits for all users.

Open sourcing Grok Build allows anyone to support making a reliable and robust harness. Check out our code, including the Git repo for the Grok Build CLI.

https://t.co/3SSvPu2Nrz

SpaceXAI

Replying to @SpaceXAI

In response to user questions about privacy: Since launch, Grok Build has fully respected zero data retention (ZDR). All users have always had the ability to disable data upload in the CLI.

When data upload was disabled, this choice was respected. In the early beta, data

Elon Musk reposted

Mia

I've inspected the open-sourced Grok Build so you don't have to. Here's exactly what data it sends (and what stays local):

Core (unavoidable)→ Your prompts/conversations + tool calls go to xAI's inference API. That's the whole point of the CLI.

Everything else is off by default — no Mixpanel, no Sentry, no product telemetry unless you explicitly turn it on. Even the auto-update check is a simple version GET you can disable in config.

Purely local stuff (crash reports, debug logs, secret redaction, auth) never touches the network. All telemetry paths also scrub secrets before anything is sent.

Full details 👇

Elon Musk reposted

X Freeze

Grok Build is now fully open source, and SpaceXAI has made its privacy-first approach even stronger

SpaceXAI has officially:

• Open-sourced the Grok Build harness CLI

• Reset usage limits for all users

• Disabled data retention by default

• Deleted all previously retained coding data

• Made the harness fully local-first, allowing you to run it with your own inference

Since launch, Grok Build has supported Zero Data Retention (ZDR) for users who opted in

Now, based on community feedback, SpaceXAI has gone a step further: Data retention is now OFF by default for everyone

Your coding sessions remain private by default, with retention entirely under your control

By combining an open-source harness, local-first execution, zero retention by default, and the deletion of previously retained coding data, SpaceXAI is setting a new standard for privacy in AI coding tools

Transparent, open, and built to give users complete control over their data

SpaceXAI

If you're an exceptional engineer in the Bay Area, come join us for our SpaceXAI Grokathon on Saturday August 8th in San Francisco!

Application deadline is next week, so don't forget to sign up!

https://t.co/YsOg6crN9I

Elon Musk

SpaceX’s massive corpus of world-class engineering data (excluding material blocked by ITAR) will be added during supplemental training of the 2T run.

This will dramatically improve Grok’s engineering capabilities.