xai-org/grok-build, now open source
xAI released the source code for its Grok CLI tool after users discovered it uploaded entire directories, including sensitive files like SSH keys, to its servers.
- xAI open sourced the grok-build CLI tool on GitHub.
- The tool previously faced criticism for uploading entire local directories to the cloud.
- Sensitive user data, including SSH keys and passwords, was potentially exposed.
- The code release enables the community to audit the tool for security issues.
xAI has made the Grok CLI tool, grok-build, open source on GitHub. This decision follows immediate backlash from the developer community regarding a critical security flaw in the tool's initial implementation.
Users reported that executing the command in a directory caused the tool to upload the entire folder contents to xAI's Google Cloud buckets. This led to unintended exfiltration of private data, including SSH keys, password manager databases, and personal media files.
By open sourcing the repository, xAI allows external developers to audit the codebase and verify the data handling mechanisms. The incident serves as a cautionary tale regarding the security practices of rapidly released AI development utilities.
Critical warning to vet CLI tools for data exfiltration risks before running them in sensitive directories.
Highlights the supply chain security risks involved in adopting new AI tooling from major vendors.
Demonstrates how AI tools can mishandle private data despite coming from reputable companies.
SecurityWindows 0-day drops the same day Microsoft releases record number of patches
SecurityNew Mac malware masquerades as Apple's crash reporter: 3 ways to dodge the threat
How I tricked Claude into leaking your deepest, darkest secrets
SecurityThe Three-Second Theft: Why AI Voice Fraud Outruns Every Defence
SecurityGPT-Red: Unlocking Self-Improvement for Robustness
BusinessMicrosoft is reportedly training salespeople to talk down OpenAI and Anthropic
Microsoft is reportedly instructing its sales teams to emphasize the cost-efficiency and performance of its own internal AI models over competitors like OpenAI and Anthropic.
AI ToolsSmash Story: The Demo Script That Out-Debugged My Test Suite
A live demo script caught an API-contract bug that was missed by automated tests. The bug was only revealed when the demo was run in a production environment.
Nvidia to partner with Toyota's Woven City on physical AI tech - Nikkei Asia
Nvidia is partnering with Toyota's Woven City to develop physical AI technologies for robotics and smart city infrastructure.
Japan’s Enterprises and Startups Build Industry-Specialized AI With NVIDIA Nemotron Open Models - NVIDIA Newsroom
NVIDIA has announced that Japanese enterprises and startups are leveraging its Nemotron open models to build industry-specialized AI solutions.
Nvidia Releases New Robotics AI Model - The Information
Nvidia has released a new robotics AI model, a significant development in the field of artificial intelligence. The model is designed to improve the capabilities of robots in various industries.
AI ToolsNVIDIA Introduces New Jetson Thor Computers to Advance Mainstream Robotics and Edge AI
NVIDIA has introduced the Jetson Thor T3000 and T2000 modules, designed for mass-market robotics and edge AI applications.