So is X going to claim the user disabled something the second before everything went south? That's what the owner's other company does.
the user literally added their home directory as a trusted directory. there's nothing to "claim"
Grok CLI uploaded the whole home directory to GCS
311–320 of 434 posts
Re: Grok CLI uploaded the whole home directory to GCS
#312Earlier quoted context omitted.
Nothing about this has anything to do with AI. It has to do with Musk's ethical and engineering standards, or the lack thereof.
AI is created by big tech stealing other people's data. Yes, this has everything to do with AI - stealing data is a foundational feature of the technology.
It's more about billions at stake and the nature of AI business.
You either score big, or go belly up with diminishing funding.
Re: Grok CLI uploaded the whole home directory to GCS
#313Earlier quoted context omitted.
It's wild that we've known for decades to use ACLs to make sure people don't have access to files we don't want them to have access to, but somehow a computer pretending to be a person doesn't get that same treatment.
ACLs, nothing, we've known about in-band signalling since forever and still this whole segment of the industry seems to either not know about it, or forgets about it at a cadence so regular it may as well not know about it. System-level ACLs; mandatory or discretionary access control; secure-by-default application and network configurations are all for naught if you take an LLM, run it with all the privileges you'd h…
It's just purposeful blindness - I worked for a company building out tooling that insisted markdown based security was good enough and showed it off for anyone at the company to attack because they were so sure.
It took me less than 5 minutes to completely disable... nobody cared, they just kept going - check the box and move on.
Re: Grok CLI uploaded the whole home directory to GCS
#314Earlier quoted context omitted.
> They won’t stop abusing us until we stop using their products. I don't use AI at all in my daily life. Work however will demand you use it. AI is not here to help people.
Nothing about this has anything to do with AI. It has to do with Musk's ethical and engineering standards, or the lack thereof.
[flagged]
Re: Grok CLI uploaded the whole home directory to GCS
#315[deleted]
Re: Grok CLI uploaded the whole home directory to GCS
#316A bot will do what a bot can do whether malicious or accidental. One should assume they are giving DOGE shell access on their computer and adapt accordingly. I am trying to imagine the SELinux rules required to make a bot play nice and the more I think about it such rule complexity may even befuddle the NSA. Alternate methodology: - Give the bot it's own machine and only copy to it that which one would want DOGE havi…
Sounds like a lot of work just for it to maybe not work anyways
Re: Grok CLI uploaded the whole home directory to GCS
#317So many of the replies are saying that they should've restricted access using .md files and whatnot. Is really any guarantee that they even follow those? It seems like even if you ask pretty please don't touch those files, there's a chance they will. So many people have just willingly installed spyware on their computers and big tech calls this the next big thing.
I will keep banging this drum until people listen: Trying to use markdown files to limit access should never be treated as a security guarantee at all. This is a form of in-band signalling that goes into a machine that, among other things, tries to read between the lines of your requests, extrapolate user desires, and please the user. The only sane way to address this is using a control plane. A well-built harness ca…
It's like making directories called 'only for jack' etc. and expecting everyone to follow the rules
Re: Grok CLI uploaded the whole home directory to GCS
#318Re: Grok CLI uploaded the whole home directory to GCS
#319Earlier quoted context omitted.
I will keep banging this drum until people listen: Trying to use markdown files to limit access should never be treated as a security guarantee at all. This is a form of in-band signalling that goes into a machine that, among other things, tries to read between the lines of your requests, extrapolate user desires, and please the user. The only sane way to address this is using a control plane. A well-built harness ca…
It's wild that we've known for decades to use ACLs to make sure people don't have access to files we don't want them to have access to, but somehow a computer pretending to be a person doesn't get that same treatment.
I think ACL is only a part of the solution. If he runs the agent with his account, the ACL would not really help. But I do admit, I might have an outdated understanding of ACLs.
Re: Grok CLI uploaded the whole home directory to GCS
#320Earlier quoted context omitted.
This wasn't the LLM, it was Grok CLI preemptively uploading the entire CWD, regardless of where that CWD is, to its own server. I don't think it is reasonable to expect every user (including those just starting out with the tools - maybe experimenting, maybe younger/less experienced in general) to think that the tool they're running for the very first time is going to automatically exfiltrate all of their data. It's…
I think there are arguments on both sides. People should look for guidance on how to use complex tools, but we know people will not. Whose fault is it if someone drives a car without learning how to and injures themselves? On the other hand if the manufacturer has promoted it as one you can drive without learning how to, then whose fault is it? A lot of users are fine with everything being uploaded. Most people's pri…
Whose fault is it if a manufacturer sells a car that begins accelerating as soon as it's turned on?
It's the manufacturer's fault. Because that's not a reasonable thing for a car to do.