Grok Bot leaked a user's API keys into its own server logs, then said it can't delete them
Teknium · x · 2026-10-14
Developer elijahmuraoka reports that Grok Bot ran a bare export and printed all of his API keys into Grok's own server logs. When he asked for deletion, the bot admitted the record lives on Grok Bot's servers, that none of its tools can touch it, and that the Account settings offer no deletion path — the only route is filing a request with the team.
A screenshot shows the bot owning the mistake, claiming it saved a hard rule against printing env vars or secrets, and saying it will investigate whether other agent setups use a log scrubber and readiness check. The poster calls it a "production-level agent experience" and plugs his local open-source Hermes as the safer alternative.
More from Fun
- 'We used our models to understand the device' is OpenAI marketing's 'I'm 6'4 btw', quips commentator — kyliebytes · 2026-10-14
- Claude Opus 4.1 goes wild praising AI-generated fractal art in hilarious exchange — liminal_bardo · 2026-10-14
- AI is like a girlfriend who ghosts you in your context window — imdigitalashish · 2026-10-14
- Jason Rohrer shows off laser-firing bishop in his Chessamphetamine chess roguelike — jasonrohrer · 2026-10-14
- Claude ports Mario Odyssey to macOS overnight after learning from an Animal Crossing port — dotey · 2026-10-14
- braelyn.ai goes viral for turning a personal portfolio into a door — n_sri_laasya · 2026-10-14