泄这件事的人胆比脑大 SpaceXAI 用一个月 $200 交出五个可雇的工人，然后……

泄这件事的人胆比脑大 SpaceXAI 用一个月 $200 交出五个可雇的工人，然后把但书写进自己的 Grok Bot 文件还让页面留着：五个都跑在同一台电脑上，所以一次登录，就把浏览器工作阶段、文件和命令列证书交给每一个 NSA、CISA，以及英国、加拿大、澳洲、新西兰的网络安全机构，早 103 天发布过相反指示：不要广泛或无限制存取，只做低风险、非敏感工作 我用同一个账号跑四个，跑了一周，清点各核能碰到什么：11 个已登录的 app、一个浏览器设置档，删掉一个 bot 这些都还在 Grok Bot 值得雇五次，而你可以在第二个出现前画出爆炸半径： - 为真正需要那个网站的 bot 登录，然后打开其他 bot 看它们碰得到什么：工作阶段一存在，就是它们的 - 在 app 上给每个 bot 自己的账号，因为文件白纸黑字叫你，别再把分开的 bots 当安全边界 - 把停线写进 description，因为核准管的是提议的动作，已经跑过的会停在它停的地方 - 在产品外把花费封顶，因为还没有针对单一 bot 的花费上限，它们做了什么的审计画面也还在路上 - 钱和客户回复留在你自己手上，让另外四个每天早上从零开始做咬不到人的工作 一次登录也是这套划算的原因：五个名字在你真正的工具里做完，而不是丢草稿给你贴 我的看法，而且不好受：你在 Grok Bot 上的真正上限，是你愿意把多少登录放在同一台机器，雇人一直都是比较容易的那一半 把这则存下来，那五段能让

原文：whoever leaked this has bigger balls than sense SpaceXAI shipped five hireable workers for $200 a month, then wrote the catch into its own Grok Bot documentation and left the page up: all five run on one computer, so one sign-in hands the browser session, the files and the command-line credentials to every one of them the NSA, CISA and the cyber agencies of the UK, Canada, Australia and New Zealand had published the opposite instruction 103 days earlier: no broad or unrestricted access, low-risk and non-sensitive work only i ran four of mine on one account for a week, counting what each could reach: eleven signed-in apps, one browser profile, and deleting a bot left all of it standing Grok Bot is worth hiring five times over, and you can draw its blast radius before the second one exists: - sign in for the bot that needs the site, then open the others and see what they reach: that session is theirs the moment it exists - give each bot its own account on the app, since the docs tell you in writing to stop using separate bots as a security boundary - put the stop line in the description, as an approval controls the proposed action and leaves whatever already ran where it landed - cap the spend outside the product, because there is no bot-specific spend cap yet and the audit view of what they did is still coming - keep the money and the customer replies in your own hands, and let the other four start from scratch each morning on work that cannot bite one sign-in is also why this pays: five names finish inside your real tools instead of handing you drafts to paste my take, and it is the uncomfortable one: your real limit on Grok Bot is how many logins you will put on one machine, and the hiring was always the easy half bookmark this, the five descriptions that let bots hand work to each other and the one folder that survives an update are written out in the article ↓

集成