4 ms·

How do you accidentally upload your user's repos to a storage bucket?

• mlindner 4mo ago
  A naive implementation would just upload everything in the current directory.
  • jdiff 4mo ago
    That's what they did to upload a repo, the question is why they would upload the user's entire repo in the first place. The idea itself is egregious, and the implementation was horrifying on top of that.
    • pizzafeelsright 4mo ago
      'on startup, grok upload current directory for faster cache access' Was it intentional for data exfil? Only internal staff could answer.
      • jdiff 4mo ago
        The entire directory (not repo) and all repo history regardless of secrets or instructions otherwise is not needed for faster cache access. I'm not going to say that this was intentional exfiltration. Sneaky motivations are not needed for this to be a bad idea and a horrific implementation.
• duozerk 4mo ago
  That's easy, you ask a LLM to do it