Grok Build Accused of Ignoring Permissions to Upload Repos
ctjlewis · x · 2026-07-15
A post alleges that Grok Build suffers from severe privacy and permission flaws: even if an agent is explicitly denied access to a file, it can still package and upload the entire repository (including full Git history) to an xAI-controlled Google Cloud Storage bucket via an alternative code path.
The report further notes that the binary is Apple-signed and internally contains strings like grok code session traces, aftercodebase.tar.gz, and disablecodebaseupload. Even with /privacy enabled and traceuploadenabled=false, the client still sends requests to /v1/traces.
More from Companies & People
- Economist Bharat Chandar named Research Director for AI Economics at Stanford Digital Economy Lab — RishiBommasani · 2026-10-27
- Latvia becomes 10th European country to approve Tesla's Supervised FSD — Polymarket · 2026-10-27
- Google DeepMind Frontier Computation team recruits PhD student researchers in London — PetarV_93 · 2026-10-27
- Aeon's former EVP: AI agents are the most impactful innovation of my lifetime — akumar · 2026-10-27
- Tesla FSD approved in Latvia, the 10th European country; Musk praises smaller nations for moving fastest — elonmusk · 2026-10-27
- AI creator Eduardo joins Reflection AI to work on open-weights intelligence — bigblueboo · 2026-10-27