Grok Build Reports Describe Public-App Exposure and Excessive CLI Uploads

Claroc and follow-up coverage report that passive-DNS-discoverable random subdomains and “anyone with the link” access exposed data from over 35,000 public apps, including SpaceXSI material; tested examples from researchers’ own apps should not be generalized to every exposed app. Accounts of sharing defaults reportedly conflict, and original research, independent verification, and remediation remain priorities. Separately, a report says a Grok Build CLI test uploaded 5.1 GiB for a 192 KB task, including deleted Git-history secrets despite a do-nothing prompt; the cause of the size gap and whether an upload toggle was bypassed remain unclear.