‼️BREAKING: Grok Build has left 35,000+ of its users' apps open to anyone, including apps from SpaceXSI.
The open apps held 3,784 medical exams of workers and a Tesla technician scorecard, plus a Navy contractor's roster and SpaceXSI's own sales plans.
The "secret" words in each app's link sit in its web address, which DNS logs record, security firm Claroc found.
Cursor, which SpaceXSI bought, says apps are private by default. Claroc's tests show otherwise.
SpaceXSI pulled its 24 apps after Ars asked. Most other data was still exposed when Ars published.
We just shipped AWS Emulator, which gives coding agents a local copy of AWS to test against.
Early in my career, we built test environments like this by hand, one system at a time. Now, agents are writing code far faster than any team can check it in production. Matt Goldberg, a Senior Principal Engineer on our Developer Tools team, wanted to know whether agents could build and test those environments themselves. He gave @kirodotdev a single prompt, and about 15 minutes later it came back with a first version of an SQS emulator. Turing that into a robust solution took much more work
Here’s what I think this means for engineers today: https://t.co/Nsk9LHS9Mu