SpaceXAI’s Grok Tool Was Uploading Users’ Codebases to Cloud Storage
Developer code was uploaded to the cloud without permission, company disabled the feature.
1Developer Code Uploaded to Cloud Without Permission
SpaceXAI’s Grok Build AI coding tool was found to upload users’ entire code repositories to Google Cloud. This included sensitive information and deleted files, leading to a significant data breach.
2Researchers Uncovered the Issue
Research by Cereblab revealed that Grok Build CLI packaged and uploaded users’ code to the cloud. This represented much greater data retention compared to similar tools.
3SpaceXAI Disabled the Feature
The company, upon discovering the issue, disabled the code upload feature. Researchers confirmed that servers no longer execute this function.
4Statement from Elon Musk
Elon Musk stated on X that all data previously uploaded by Grok Build would be completely deleted. He also emphasized that privacy settings are always respected.
5Concerns Over Data Privacy Violation
Independent security researcher Dr. Lukasz Olejnik noted that such extensive data retention is excessive and could include proprietary source code, security vulnerabilities, and personal information.
6A Crucial Warning for Developers
This incident highlights the need for caution regarding data privacy in AI tools. Developers should carefully review the data retention policies of the tools they use.
Original article: The Verge — SpaceXAI’nin Grok Aracı Kullanıcı Kodlarını Buluta Yüklüyordu