> according to follow-up testing by the security researcher who exposed the behavior.

This behavior was originally discussed here:

"What xAI's Grok build CLI sends to xAI: A wire-level analysis"

https://news.ycombinator.com/item?id=48877371

509 points | 1 day ago | 203 comments

Thanks! Comments merged thither.

See also this related ongoing thread:

Grok CLI uploaded the whole home directory to GCS - https://news.ycombinator.com/item?id=48892468