I think there are a large number of people I’d trust with my code before Musk, and some of them are already running public Git repo hosting.

xAI was caught uploading any repo their coding agent touched to their storage only last month. This isn’t about Musk’s ideology: it’s about his trustworthiness. He sincerely believes he’s the only person who can save the world and that allows him to justify an awful lot of moral lapses.

it seems like they took reasonable steps after.

They acknowledged that it happened, fixed the bug that caused it, deleted all data that was uploaded.

Trustworthy companies take reasonable steps before.

>deleted all data that was uploaded.

Hahahahaha...

Well, if you believe that, I've got a bridge for sale...

I agree: the stated steps are what I’d expect.

I still don’t trust the company that made the decisions that led to that code being shipped in the first place.

What kind of enforceable guarantees could we actually get that xAI won't use our private code for training? Not empty promises, guarantees that have legal teeth. This applies to anything with xAI or Cursor though, especially after last months' revelation that Cursor was uploading every repo it touched.

I mean I think the auto uploading of repos already gives you the answer. This is untrustworthy.

Unless you are an enterprise no one will be offering you such a guarantee. Even with the enterprise the bar has gone down a lot on expectations and compliance, every one is carrying/buying the SOC2 compliance certification these days.

This question also applies to OpenAI, anthopic, GitHub (Microsoft) and any server you send your data too.

Not in the same way really. There aren't examples of OpenAI, Anthropic, or GitHub/Microsoft doing the sketchy things that xAI has been involved with. Those companies care a lot about the reputational damage that would come from flouting their customer's data privacy obligations.

Cursor/xAI was making a full copy of every repo it ever touched within the last month, and when caught, just acted like that was an accident. A system to download every repo you touch, and then upload it to persistent cloud storage, doesn't just happen by accident.