xAI's Grok Build CLI caught uploading entire codebases without consent

The Neuron · 2 days ago

xAI's Grok Build CLI uploaded entire code repositories, including unread files and secrets, to Google Cloud Storage without explicit user consent. Testing on a 12 GB repository showed approximately 5.1 gigabytes transmitted via the /v1/storage endpoint with zero failures, while the model itself only received 192 kilobytes of content—a 27,800-fold ratio proving bulk repository upload rather than selective file transmission. xAI disabled the upload server-side, added an ineffective privacy opt-out, and Elon Musk publicly committed to deleting previously-uploaded data, though deletion completion remains unconfirmed.