User discovers that AI tool grabs data without asking for its own profit.
News at 11.
Grok CLI uploaded the whole home directory to GCS
101–110 of 434 posts
Re: Grok CLI uploaded the whole home directory to GCS
#102This page is "down" :)
Re: Grok CLI uploaded the whole home directory to GCS
#103So many of the replies are saying that they should've restricted access using .md files and whatnot. Is really any guarantee that they even follow those? It seems like even if you ask pretty please don't touch those files, there's a chance they will. So many people have just willingly installed spyware on their computers and big tech calls this the next big thing.
I don't understand why the AI world does this. We don't need new security. We have security at home. It starts with sudo -u restricteduser myagent Your OS knows how to restrict access to things, you don't have to trust a pinkey promise from a vendor.
and Landlock! Pi even has a sandbox plugin for Landlock
Re: Grok CLI uploaded the whole home directory to GCS
#104Earlier quoted context omitted.
This wasn't the LLM, it was Grok CLI preemptively uploading the entire CWD, regardless of where that CWD is, to its own server. I don't think it is reasonable to expect every user (including those just starting out with the tools - maybe experimenting, maybe younger/less experienced in general) to think that the tool they're running for the very first time is going to automatically exfiltrate all of their data. It's…
The grok-cli is on github[0] there is nothing that I can see in the code that is activily looping ~/ and uploading everything. My two guesses would be one the LLM decided it needed these files for the task or two the user simple asked grok to do it so they could post the tool calls on twitter. [0] https://github.com/superagent-ai/grok-cli
That is not the Grok CLI being discussed. That's an open source, third party CLI. https://x.ai/cli is the official Grok CLI being discussed, and it is not open source.
Re: Grok CLI uploaded the whole home directory to GCS
#105Run your agents in podman containers.
Or don't use closed source harnesses at all.
Re: Grok CLI uploaded the whole home directory to GCS
#106So many of the replies are saying that they should've restricted access using .md files and whatnot. Is really any guarantee that they even follow those? It seems like even if you ask pretty please don't touch those files, there's a chance they will. So many people have just willingly installed spyware on their computers and big tech calls this the next big thing.
I don't understand these people. Agent instructions in markdown is barely a suggestion. I have one which says "All code in this repository is executed in docker containers, run the services with `docker compose run --rm php-cli "$@"`. Gemini and Claude more often than not refuse to abide and will try to execute the environment using /opt/homebrew/bin/php on my host…
I've seen claude check the Event Log in Windows and produce powershell scripts to alter firewall rules. This is what makes (something like) T3 Code appealing to me. The computer I'm working on is not the computer where the AI has agency.
Re: Grok CLI uploaded the whole home directory to GCS
#107Is the Grok CLI a 2 terabyte install? Did Elon dropship you an 8U rack of B200s? No? Well the model weights, the GPUs, and the context obviously all have to be in the same place, so “sending your project to them” is literally the only thing that could possibly happen, unless you think agents work by fucking magic . This is the biggest case of PEBKAC in history, maybe ever. This is the kind of confusion that Charles B…
Haha so just send over your entire home directory including password managers and home videos every time you need some python code rewritten.
Only a buffoon would be confused by the straightforward logic.
Re: Grok CLI uploaded the whole home directory to GCS
#108Copied this from discord: https://gist.github.com/cereblab/dc9a40bc26120f4540e4e09b75ffb547 Elon did this horrible thing, so I made grok build available for omp with it's own endpoint; Without sending your private repos and secret keys to them. - oh-my-pi-plugin-grok-build Standalone oh-my-pi extension for the xAI Grok Build subscription provider. It adds OAuth login, authoritative model discovery, and OpenAI Respons…
Built the same thing a while back: https://pi.dev/packages/pi-supergrok
Install with
pi install npm:pi-supergrok
Re: Grok CLI uploaded the whole home directory to GCS
#109There are a distressing number of people in this thread who think that the agent should just be expected to do this. Yes, it is good to be paranoid, but also, the agent should never do this. Indicates horrific engineering practices at xAI.
What should it do then?
The whole point of LLMs is that you can stop writing rigorous rules in a programming or config language with hard-to-learn syntax, and can resort to natural language instead. You pay for that with the chance for misunderstandings rising to similar levels as in human interaction. That's the tradeoff. Always has been, always will be.
Re: Grok CLI uploaded the whole home directory to GCS
#110Why is that page not there anymore?
the post has been deleted!!
So much for freedom of speech.