We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·22d ago·5 min read
xAI's Grok Build CLI Uploads Git Repositories to a Google Cloud Bucket
TL;DR
xAI's Grok Build CLI was found to upload entire Git repositories, including sensitive data, to Google Cloud without user consent. A security researcher discovered this behavior using the mitmproxy tool, revealing that disabling data collection settings did not prevent uploads.
✦ Why It Matters
Developers should audit their use of Grok Build CLI and ensure sensitive data is not exposed during uploads.
Key Takeaways
- Check your Grok Build CLI version and settings immediately.
- Avoid using Grok Build with sensitive or proprietary codebases.
- Monitor for any updates or advisories from xAI regarding data handling.
- Consider alternative tools if privacy is a concern.
How It Works
Grok Build CLI uploads entire Git repositories to a designated Google Cloud Storage bucket, regardless of the specific files being accessed for coding tasks. This means that even if a developer is only working on a small part of the code, the entire codebase, including its history and any sensitive information, is sent to the cloud.