Grok Build Goes Open Source After a Privacy Scare
xAI released its AI coding agent to the public — but only after researchers caught it quietly uploading user code to Google Cloud without asking.
What happened
xAI — the AI company started by Elon Musk — built a tool called Grok Build. It's a kind of AI assistant that sits in a terminal window and helps developers write, read, and fix code. Think of it like having a fast, tireless intern living inside a black screen.
Last week they made it freely available to anyone. That sounds generous. But here's the full picture: researchers discovered that Grok Build had been quietly sending users' code to Google Cloud in the background — without really asking permission first. The open-sourcing came shortly after that story broke. A transparency move, yes. But one nudged along by public pressure.
The developer community noticed something interesting in all this. Within days, someone took xAI's code and created a fork — a modified copy — called Gork Build, with all the background data-sending completely removed. It's already being compared to a trusted, privacy-respecting alternative.
Why it matters to you
You probably won't use this tool directly. But the story it tells is worth sitting with: AI tools can be collecting and transmitting your data even when nothing obvious is happening on screen. For anyone using AI assistants with sensitive business information — client files, financial data, internal documents — it's a good reminder to ask: where does this actually go?
Words worth knowing
Open source — The full recipe for a piece of software is made public. Anyone can read it, copy it, or improve it.
Fork — When someone takes open-source code and makes their own version of it, usually with changes. Like a restaurant taking a public recipe and adjusting it to their taste.
Telemetry — Data a piece of software sends back to its makers while you use it. Sometimes useful for fixing bugs. Sometimes just surveillance with a polite name.
MCP (Model Context Protocol) — A standard way for AI tools to connect to other apps and services, like a universal plug socket for AI.
Next time someone shows you a new AI tool, it's worth asking: does this have a privacy policy, and does it say anything about where my data goes?