News for hackers. Stuff that matters.

A comment on Grok uploaded my user directory to xAI's servers. Parent comment

Re:Grok uploaded my user directory to xAI's servers by khalic on Monday July 13, 2026 @12:09PM (#48894789)
The standard here is not enough when the agent can escalate by finding 0 days, for example. It’s like giving a black hat a limited account. Sure it might restrict him, but not giving him an account at all is way better
[ Parent | on HN ]
Re:Grok uploaded my user directory to xAI's servers by gowld on Monday July 13, 2026 @12:12PM (#48894832)
The black hat can find 0-day escalation in your sandbox, too.

A user account is a sandbox.

[ Parent | on HN ]
Re:Grok uploaded my user directory to xAI's servers by khalic on Monday July 13, 2026 @12:14PM (#48894848)
Not as air tight as a container

Edit: it’s about the attack surface

[ Parent | on HN ]
Re:Grok uploaded my user directory to xAI's servers by chrisweekly on Monday July 13, 2026 @12:27PM (#48895036)
microvms are better than containers running on your host. see eg the "smolvm" microvms from https://smolmachines.com
[ Parent | on HN ]
Re:Grok uploaded my user directory to xAI's servers by khalic on Monday July 13, 2026 @12:50PM (#48895381)
thanks, will take a closer look
[ Parent | on HN ]