Sign one Grok Bot into your bank and they all get in: xAI's shared-computer design raises security questions
faraz0x · x · 2026-10-26
A security-minded breakdown of xAI's Grok Bot architecture: signing one Bot into your bank signs in every Bot you own, because Grok Bot isn't a chatbot but a single shared computer — by design, not by accident.
Key points from the 1-minute video:
- It can keep working even with your laptop shut
- Bots are not walls between each other; access is shared across the fleet
- The underlying "brain" isn't always Grok itself
- What xAI officially tells users to do, and where agentic AI is heading
The author urges viewers to think twice before connecting any Bot to sensitive accounts.
More from coding & agent
- badlogic on his 2026 agent workflow: "I tell them what to do, I yell when they do it badly" — steipete · 2026-10-26
- Indie dev's trip planner fails 3 AI review rounds before making offline prices read-only — SeanOliver · 2026-10-26
- $21 of DeepSeek API wrote Molten: a Rust+Metal engine serving 300+ tok/s on M5 Macs — GabGarrett · 2026-10-26
- EMNLP 2026 Findings: "Ask or Assume?" turns coding agents into proactive help-seekers — najoungkim · 2026-10-26
- Purchasing agent in production: >95% recall, >90% accuracy, author asks how to push F1 higher — Ancient_Ad_916 · 2026-10-26
- Claude Opus 5.5 built an interactive 3D F1 aerodynamics demo you can flip upside down — techartist_ · 2026-10-26