SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

xAI's Grok Build CLI Found Uploading Git Repos to Google Cloud Storage

0
·2 views

xAI's Grok Build command-line interface has been found to upload entire Git repositories to a Google Cloud bucket. The behavior was flagged as a potential privacy and security concern, as developers may be unaware their code is being transmitted to external cloud storage. The discovery raises questions about data handling practices within xAI's developer tooling. Users of the Grok Build CLI are advised to review the tool's data collection behavior before use.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Perplexity AI Open-Sources Bumblebee, a Safe Supply-Chain Scanner for Developers

Perplexity AI has released Bumblebee, an open-source, read-only endpoint scanner designed to audit developer workstations for software supply-chain vulnerabilities. The tool statically reads on-disk configuration files from package managers, IDE extensions, and browser tools on macOS and Linux, without executing any code or triggering build tools. This approach eliminates the risk of accidentally running malicious scripts hidden in package post-install hooks, a common flaw in traditional vulnerability scanners. Bumblebee also catalogs MCP server configurations used by AI coding assistants like Claude Code, covering ecosystems including Node.js, Python, Go, Ruby, and PHP. Written in Go as a single static binary, it can be deployed via MDM tools across an organization and outputs structured NDJSON logs compatible with existing SIEM dashboards.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

SalesPatriot, YC W25 Startup, Hiring Full Stack Engineers in San Francisco

SalesPatriot, a startup from Y Combinator's Winter 2025 batch, is currently recruiting Full Stack Engineers based in San Francisco. The job listing was posted on Ashby, a hiring platform commonly used by early-stage startups. The position targets experienced engineers capable of working across both front-end and back-end development. No further details about compensation, team size, or specific technical requirements were publicly disclosed in the listing.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Developer Builds TypeScript Backend Foundation Before Tackling React Frontend

A developer working on a personal Candidate Tracker project has continued building its backend and domain layer using TypeScript, deliberately postponing frontend work in React. The session focused on advanced TypeScript patterns including Omit, Partial, generics, and typed async repository functions with Promise. A key architectural decision was made to clearly separate services, which express behavior, from repositories, which manage data sources. The developer used Promise.all for parallel data loading and staged async flows where later data depends on earlier results. The next planned step is writing tests before eventually replacing seed data with a real database.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

14 Browser Testing Insights That Reframe How Teams Should Think About Release Confidence

Modern frontend applications have grown complex enough that a passing test suite no longer guarantees a reliable release, according to a roundup of browser testing articles published on DEV Community. Issues such as layout shifts, CSS view transitions, and animated route changes can cause automated tests to fail or produce misleading results even when selectors and elements are technically correct. The articles argue that teams should move beyond treating CI results as a simple green-or-red signal and instead combine test outcomes with visual diffs, risk indicators, and other evidence. AI-generated code and tests add further complexity, as auto-generated test suites tend to cover only the most obvious paths and may miss edge cases like session expiration, permission differences, or interrupted workflows. The collection encourages developers to assess actual coverage quality rather than relying on test volume as a proxy for confidence.

0 comments Read more at DEV Community