News: 0184506446

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

'Grok Build' Coding Tool Open Sourced This Week, Promises to Respect Zero Data Retention (theregister.com)

(Saturday July 18, 2026 @11:34PM (EditorDavid) from the X-marks-the-spot dept.)


Elon Musk confirmed SpaceX has open sourced the Grok Build CLI this week, [1]reports The Register , "just days after researchers caught the AI tool scooping up users' entire repositories and uploading them to company-controlled cloud storage."

That [2]discovery had "gathered so much negative attention that Elon Musk felt compelled to issue a public statement alongside SpaceX, and its technical staff, promising to delete all data that Grok Build has ever stored and give users more choice over how their data is handled."

> SpaceXAI's data grab was first publicized Sunday [July 12] by Cereblab, who probed Grok Build traffic and found that repos were being packaged up as Git Bundles and beamed to Google Cloud storage... [Elon Musk] said SpaceX would open-source Grok Build to sow greater trust in the product, after the codebase was audited for security vulnerabilities... ["Open-sourcing Grok Build allows anyone to support making a reliable and robust harness," [3]SpaceX posted on X.com . "Check out our code, including the Git repo for the Grok Build CLI."]

>

> In a separate statement accompanying the open source announcement, SpaceX said it has always respected Zero Data Retention (ZDR), which was applied to enterprise customers by default, and acknowledged that data retention was enabled by default for everyone else, which has now been corrected. It [4]said : "In response to user questions about privacy: Since launch, Grok Build has fully respected zero data retention (ZDR). All users have always had the ability to disable data upload in the CLI. When data upload was disabled, this choice was respected. In the early beta, data retention was enabled by default for non-ZDR users. Based on your feedback, we changed this. We are now going further to protect privacy. With all retained data deleted, retention default off, and an open-source harness, we are offering complete user privacy. You can also run Grok Build fully open-sourced and local-first with your own inference.

>

> "We disabled default retention for all Grok Build users starting on July 12th. Additionally, we are deleting all coding data that was previously retained, ensuring every user's preferences are respected. With these steps, Grok Build goes beyond other major coding products to protect user privacy."

>

> SpaceX also invited researchers to probe Grok Build for security issues and report them to its [5]bug bounty program , which offers rewards ranging from $100-$20,000, depending on the severity.

The article notes [6]Simon Willison , creator of Datasette and co-creator of Django, wrote this week that the Grok Build codebase comprises 844,530 lines of Rust code. "There are still remnants of the code that used to upload everything to Google Cloud," Willison writes, "but they seem to have been disabled now."

Elon Musk also posted Wednesday that "Once we have completed our review for security vulnerabilities, we will [7]make the entire codebase of X open source , with no exceptions. Moreover, we will invite third party reviewers to examine the system that is running to confirm that the open source code is what is running."



[1] https://www.theregister.com/ai-and-ml/2026/07/16/spacex-open-sources-grok-build-after-data-retention-furore/5272333

[2] https://www.theregister.com/ai-and-ml/2026/07/14/musk-promises-purge-after-grok-build-caught-sending-entire-repos-to-the-cloud/5271123

[3] https://x.com/SpaceXAI/status/2077494535387828644

[4] https://x.com/SpaceXAI/status/2077494536788664782

[5] https://hackerone.com/x?type=team

[6] https://simonwillison.net/2026/Jul/15/grok-build/

[7] https://x.com/elonmusk/status/2077361679034118271?ref_src=twsrc%5Etfw&ref=itsfoss.com



Be fair - no one could've seen this coming (Score:2)

by 93 Escort Wagon ( 326346 )

After all, look at how much care Musk's DOGE team put into protecting and sequestering sensitive government data!

Alan Olsen wrote:
> things correctly they have enhanced Wake-on-LAN to allow you to do
> things like reset the machine, update the BIOS and such by sending
> magic packets which are interpreted by the network card. Or maybe I am

Normally 'sending magic packets resets the machine' is considered a feature
reported to bugtraq. The alert stuff I have seen is more akin to sending SNMP
traps for things like people opening the lid, or fan failure

- Alan Cox on linux-kernel