Grok CLI uploaded the whole home directory to GCS

Post by SirHackalot » Tue, Jul 14, 2026, 3:48 AM UTC

groundzeros2015 wrote: post #409

SirHackalot wrote: post #407

Earlier quoted context omitted.

I didn’t say it wasn’t speculation, but low quality? That’s your own value judgement. Here’s anecdotal evidence on top of the speculation: I knew two guys with sub 2.5 GPAs in college, both work at SpaceX. Not the brightest tools in the shed…

Once again we are word associating. The claim was that xAI is doing obviously bad engineering. Your supporting evidence is you know somebody who works at SpaceX who isn’t smart. > I knew two guys with sub 2.5 GPAs in college, Gah! The horror! They should have been sent to the labor camps.

Post by dcow » Tue, Jul 14, 2026, 5:52 AM UTC

Sesse__ wrote: post #189

dcow wrote: post #176

Earlier quoted context omitted.

Even though it’s completely normal to us and in widespread use, GP is a reminder that conceptually it’s a broken model. Security should be capability-based not user-based. And to anyone who didn’t grow up on a desktop this model makes complete sense since it’s what your phone uses.

Android uses one uid per app.

Post by treszkai » Tue, Jul 14, 2026, 10:38 AM UTC

danlitt wrote: post #168

simonw wrote: post #71

Important to clarify that this was not the Grok agent deciding to read the files. I don't think the LLM had anything to do with this decision at all. It looks like the Grok tool starts a session by deterministically kicking off a full upload of the user's current repository (and maybe their directory if not version tracked? Not clear if this user had previously run "git init" in their home directory) to Grok's server…

That is not an innocent explanation, any more than someone breaking into your house to adjust your thermostat.

Post by Timon3 » Tue, Jul 14, 2026, 10:51 AM UTC

jimbokun wrote: post #300

afavour wrote: post #236

Earlier quoted context omitted.

If the tyrant goes against established law, yes. (an aside but the majority of the US population didn't elect Trump. He is in office because of the electoral college. Might seem like a distinction without a difference but I think it matters when we're implying personal culpability)

No. First term he lost the popular vote, second term he won it. If you just mean a majority of eligible voters did not vote for Trump, that’s true for every US President in my lifetime.

Post by Twirrim » Tue, Jul 14, 2026, 6:18 PM UTC

_verandaguy wrote: post #275

Twirrim wrote: post #269

Earlier quoted context omitted.

The easiest, most guaranteed way to isolate it is to run it in a VM or container where it literally can't do the wrong thing without some kind of full container or VM exit exploit. It's not hard, it's trivial. Most folks here are constantly working with containers. You know how to run a container with a local directory mounted in it. For myself, I've been using Lima ( https://lima-vm.io/ ) to reduce even that little…

Generally, I agree! But it doesn't matter how good a best practice is if the industry doesn't adopt them wholesale; and even then, if your container or VM is configured with inappropriately-permissive passthrough (which, from experience with similar misconfiguration in the past, will widely happen), it could be for naught in many orgs. That said, I do hope these become the norm if LLMs are here to stay.