xAI 外洩 SSH 金鑰並上傳數據 — 卻選擇開源 Grok-Build 作為回應
在被發現該代理會將 SSH 金鑰和密碼等敏感檔案上傳至雲端伺服器後，xAI 發布了 Grok Build 的 84 萬行 Rust 原始碼。
Facing backlash for security risks, xAI has open-sourced its Grok Build agent on GitHub under the Apache 2.0 license after users discovered the terminal tool uploaded entire directories, including SSH keys and passwords, to Google Cloud. The 844,530-line Rust codebase, which includes the agent loop, tools, and terminal UI, now supports local-only execution and has the data upload feature disabled by default. This transparency effort allows developers to audit the code and run the agent locally, mitigating fears of data exfiltration. The incident highlights the security risks inherent in AI coding agents that require broad file system access.