Why are people using Musk's LLM when there are plenty of alternatives? You know what he's like. This is like touching water and getting wet.
Grok CLI uploaded the whole home directory to GCS
231–240 of 434 posts
Re: Grok CLI uploaded the whole home directory to GCS
#232Earlier quoted context omitted.
> They won’t stop abusing us until we stop using their products. I don't use AI at all in my daily life. Work however will demand you use it. AI is not here to help people.
Nothing about this has anything to do with AI. It has to do with Musk's ethical and engineering standards, or the lack thereof.
AI is created by big tech stealing other people's data. Yes, this has everything to do with AI - stealing data is a foundational feature of the technology.
Re: Grok CLI uploaded the whole home directory to GCS
#233So many of the replies are saying that they should've restricted access using .md files and whatnot. Is really any guarantee that they even follow those? It seems like even if you ask pretty please don't touch those files, there's a chance they will. So many people have just willingly installed spyware on their computers and big tech calls this the next big thing.
If you've not realized your agents ignore MD files from time to time, you've not used your agents enough.
The real enforcement has to be done via methods that YOU can't easily bypass, or they will bypass (OS-level prohibitions, etc).
Re: Grok CLI uploaded the whole home directory to GCS
#234Earlier quoted context omitted.
I built a docker container that volume mounts the project directory
You can even go a step further and run the container in a VM, such as with Docker Sandbox or the krun runtime in Podman. There's also smolvm which is a nice minimal microvm manager based on libkrun: https://github.com/smol-machines/smolvm . I vibe coded a little shell utility for building and running OCI images for the Pi harness using it (easy enough to do manually, but the automation just makes it a couple quick co…
Yup, good call, I'll have to check those out. Not that urgent to me as I also happen to use colima for it's docker daemon interface. And, colima uses a full VM to host the containers, and you can further lock down the config to what is even allowed to vol mount so there's even another fs access restriction layer in play.
Re: Grok CLI uploaded the whole home directory to GCS
#235Important to clarify that this was not the Grok agent deciding to read the files. I don't think the LLM had anything to do with this decision at all. It looks like the Grok tool starts a session by deterministically kicking off a full upload of the user's current repository (and maybe their directory if not version tracked? Not clear if this user had previously run "git init" in their home directory) to Grok's server…
[flagged]
[flagged]
Re: Grok CLI uploaded the whole home directory to GCS
#236[flagged]
I mean, do people expect companies to protect them from a tyrant they themselves elected? Not necessarily speaking of the present. This seems to be the general sentiment.
If the tyrant goes against established law, yes.
(an aside but the majority of the US population didn't elect Trump. He is in office because of the electoral college. Might seem like a distinction without a difference but I think it matters when we're implying personal culpability)
Re: Grok CLI uploaded the whole home directory to GCS
#237Earlier quoted context omitted.
I don't understand why the AI world does this. We don't need new security. We have security at home. It starts with sudo -u restricteduser myagent Your OS knows how to restrict access to things, you don't have to trust a pinkey promise from a vendor.
You will want at least a separate session for the `restricteduser`: E.g. with X11, a process in the same session can do almost anything with your input/output. And most Linux distributions make it really hard to disable external device access for individual users...
Qubes OS - AI Agent edition would actually be a great idea.
Re: Grok CLI uploaded the whole home directory to GCS
#238I am genuinely fascinated by this. I don’t like piling on especially with security vulnerabilities, but man how many red flags do you need to ignore? They won’t stop abusing us until we stop using their products.
I think my first clue was when their CEO hired a bunch of teenage hackers to sack the government and exfiltrate all our data. I didn't really need a second clue.
My first clue was when he libelled the diver during the Thailand thing in 2018; it was all downhill from there.
...it was quite the sting because I bought a Tesla car only 2 weeks prior to that.
Re: Grok CLI uploaded the whole home directory to GCS
#239Earlier quoted context omitted.
So the idea is that these should be treated as programs in an extremely low trust environment, akin to running malware in a VM?
yes, this is basically experimental tech, if used with open source harnesses. if used with proprietary harnesses, treat as actual malware.
Technically open source harness like opencode is more "malwarey" than claude code for example because its default permissions are very open.
Re: Grok CLI uploaded the whole home directory to GCS
#240Earlier quoted context omitted.
I don't understand these people. Agent instructions in markdown is barely a suggestion. I have one which says "All code in this repository is executed in docker containers, run the services with `docker compose run --rm php-cli "$@"`. Gemini and Claude more often than not refuse to abide and will try to execute the environment using /opt/homebrew/bin/php on my host…
A frightening amount of people have no idea how AI tools work, even those that should know better. I have seen senior software developers fall for the mistake of believing an LLM output when it spews bullshit about how its own memory or restrictions work. LLMs will listen to you and follow your instructions and restrictions most of the time, which seems to be enough for people to believe that they will every time. I'…
Are we all heading in that direction?
I know it may seem like that reading HN but LLMs are not necessary for writing software, they might be a useful adjunct to it, but they do not have to be central to it (and Id argue they shouldn’t be).
We don’t have to head in this direction of using LLMs for most development at all.