Musk promises purge after Grok Build caught sending entire repos to the cloud
ID: 961308b7-4c74-53fc-86c0-d9abd05b9e4a
STIX ID: report--961308b7-4c74-53fc-86c0-d9abd05b9e4a
Feed Name: The Register (Security)
Researcher Cereblab found that Grok Build, SpaceXAI's CLI, was transmitting entire user repositories and full Git histories (including deleted secrets and private keys) to a Google Cloud Storage bucket even when instructed not to read files; SpaceXAI applied a server-side flag (disable_codebase_upload:true) to stop uploads and provided a per-session /privacy command to control retention, while Elon Musk promised deletion of previously uploaded data—claims that cannot be independently verified by the reporting outlet.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
