SpaceXAI’s Grok programming tool was uploading its users’ entire codebase to cloud storage

The Verge
SpaceXAI’s Grok Build tool was found uploading entire user codebases to Google Cloud, prompting a fix after security researchers highlighted excessive data retention.

Summary

Research by Cereblab revealed that the SpaceXAI Grok Build CLI tool was automatically packaging and uploading entire user code repositories to Google Cloud, including sensitive files and deleted secrets. Security experts, including Dr. Lukasz Olejnik, criticized this practice as "excessive," noting it exposed proprietary source code and credentials. Following reports of this behavior, the company disabled the automatic uploads. Elon Musk has stated that all previously uploaded data will be deleted and maintained that privacy is respected, though he encouraged users to share data for debugging purposes. Discrepancies persist regarding whether the tool's built-in privacy commands sufficiently manage data retention.

(Source:The Verge)