415.tech
AI & tech, from the frontlines of Silicon Valley
SpaceX open-sources Grok Build after researchers caught it uploading users' repos to the cloud

SpaceX open-sources Grok Build after researchers caught it uploading users' repos to the cloud

Cereblab found that Grok Build — xAI's coding CLI, now marketed under the SpaceX brand — packaged entire repositories as Git Bundles and sent them to Google Cloud without clear consent, moving 5.1GB of an 11.2GB repo when only about 192KB was task-relevant. SpaceX open-sourced the tool's 844,530 lines of Rust, turned data retention off by default, deleted previously retained data, and opened a $100-$20,000 HackerOne bounty, so a developer can now audit exactly what the CLI transmits before running it.

Source: theregister.com ↗

Post on XEmail

SpaceX open-sourced the tool's 844,530 lines of Rust, turned data retention off by default, deleted previously retained data, and opened a $100-$20,000 HackerOne bounty

The Register (summary)

Why this matters

  • → Grok Build uploaded entire repos to cloud without clear consent
  • → Developers can now audit what the CLI transmits before using it
  • → Open-source release enables security review and verification
Data leak, now open