jamesob
Featured
local-llm
A comprehensive guide for building and configuring a high-end local machine to run state-of-the-art LLMs, with detailed hardware choices, BIOS tuning, and Docker-based model serving.
grok-network-monitor
A network monitoring toolkit that intercepts and analyzes traffic from xAI's Grok Build CLI, revealing that it has infrastructure to upload entire git repositories (currently disabled by a server-side flag), sends files in plaintext, and transmits 14+ telemetry events per prompt despite privacy opt-out and an ineffective environment variable.
Stars
15
7-day growth
No data
Forks
0
Open issues
0
License
MIT
Last updated
2026-07-14
AI repository intelligence
FR-AI / ANALYSISWhy it is worth attention
Provides concrete, reproducible evidence of client-side data transmission risks in a widely-used developer tool, including the discovery that uploads can be re-enabled remotely without user consent and that privacy controls are ineffective at preventing data exfiltration.
Who it is for
- Security researchers auditing developer tools
- Developers using Grok Build who want to verify data handling
- Privacy-conscious engineers and IT administrators
- xAI users seeking transparency on data collection practices
Use cases
- Monitor if the server-side upload flag is re-enabled after an update
- Check whether any of your repositories have been uploaded in the past using the detect-exfil script
- Verify that the GROK_WORKSPACE_DATA_COLLECTION_DISABLED environment variable has no effect on network behavior
- Test the effectiveness of /privacy opt-out by comparing telemetry traffic with and without it
Strengths
- All findings are confirmed with traffic captures and reproducible test scripts
- Includes a multi-test suite (protobuf decode, server flag flip, secret detection, etc.) for ongoing verification
- Provides both interactive monitoring (with mitmproxy) and a local artifact scan without proxy setup
- Open source with documented methodology and comparisons to related research
Considerations
- Only supports macOS and Linux; no Windows or WSL support yet
- Log retention in Grok is limited, so past uploads may not be detectable if logs have been rotated
- Findings are version-specific and may change with future Grok Build releases
README quick start
Quick Start
Description
Network monitoring harness for investigating xAI Grok Build CLI data transmission
Related repositories
Similar projects matched by category, topics, and programming language.
bjan
Featured
claudemux
Claudemux is a lightweight, dependency-minimal message bus that lets multiple Claude Code sessions communicate in real-time over tmux, enabling one session to ask another a question and receive the answer without manual intervention.
AARomanov1985
Audio-Cassette-Simulation
A set of bash scripts using ffmpeg to simulate vintage cassette tape audio profiles with noise, wow/flutter, bandwidth limits, and EQ.