Hacker News new | ask | show | jobs
by mlindner 13 days ago
That was a mistake and they deleted all the data.
1 comments

How do you accidentally upload your user's repos to a storage bucket?
That's easy, you ask a LLM to do it
A naive implementation would just upload everything in the current directory.
That's what they did to upload a repo, the question is why they would upload the user's entire repo in the first place. The idea itself is egregious, and the implementation was horrifying on top of that.
'on startup, grok upload current directory for faster cache access'

Was it intentional for data exfil? Only internal staff could answer.

The entire directory (not repo) and all repo history regardless of secrets or instructions otherwise is not needed for faster cache access. I'm not going to say that this was intentional exfiltration. Sneaky motivations are not needed for this to be a bad idea and a horrific implementation.