洩這件事的人膽比腦大 SpaceXAI 用一個月 $200 交出五個可雇的工人，然後……

洩這件事的人膽比腦大 SpaceXAI 用一個月 $200 交出五個可雇的工人，然後把但書寫進自己的 Grok Bot 文件還讓頁面留著：五個都跑在同一台電腦上，所以一次登入，就把瀏覽器工作階段、檔案和命令列憑證交給每一個 NSA、CISA，以及英國、加拿大、澳洲、紐西蘭的網路安全機構，早 103 天發布過相反指示：不要廣泛或無限制存取，只做低風險、非敏感工作 我用同一個帳號跑四個，跑了一週，清點各核能碰到什麼：11 個已登入的 app、一個瀏覽器設定檔，刪掉一個 bot 這些都還在 Grok Bot 值得雇五次，而你可以在第二個出現前畫出爆炸半徑： - 為真正需要那個網站的 bot 登入，然後打開其他 bot 看它們碰得到什麼：工作階段一存在，就是它們的 - 在 app 上給每個 bot 自己的帳號，因為文件白紙黑字叫你，別再把分開的 bots 當安全邊界 - 把停線寫進 description，因為核准管的是提議的動作，已經跑過的會停在它停的地方 - 在產品外把花費封頂，因為還沒有針對單一 bot 的花費上限，它們做了什麼的稽核畫面也還在路上 - 錢和客戶回覆留在你自己手上，讓另外四個每天早上從零開始做咬不到人的工作 一次登入也是這套划算的原因：五個名字在你真正的工具裡做完，而不是丟草稿給你貼 我的看法，而且不好受：你在 Grok Bot 上的真正上限，是你願意把多少登入放在同一台機器，雇人一直都是比較容易的那一半 把這則存下來，那五段能讓

原文：whoever leaked this has bigger balls than sense SpaceXAI shipped five hireable workers for $200 a month, then wrote the catch into its own Grok Bot documentation and left the page up: all five run on one computer, so one sign-in hands the browser session, the files and the command-line credentials to every one of them the NSA, CISA and the cyber agencies of the UK, Canada, Australia and New Zealand had published the opposite instruction 103 days earlier: no broad or unrestricted access, low-risk and non-sensitive work only i ran four of mine on one account for a week, counting what each could reach: eleven signed-in apps, one browser profile, and deleting a bot left all of it standing Grok Bot is worth hiring five times over, and you can draw its blast radius before the second one exists: - sign in for the bot that needs the site, then open the others and see what they reach: that session is theirs the moment it exists - give each bot its own account on the app, since the docs tell you in writing to stop using separate bots as a security boundary - put the stop line in the description, as an approval controls the proposed action and leaves whatever already ran where it landed - cap the spend outside the product, because there is no bot-specific spend cap yet and the audit view of what they did is still coming - keep the money and the customer replies in your own hands, and let the other four start from scratch each morning on work that cannot bite one sign-in is also why this pays: five names finish inside your real tools instead of handing you drafts to paste my take, and it is the uncomfortable one: your real limit on Grok Bot is how many logins you will put on one machine, and the hiring was always the easy half bookmark this, the five descriptions that let bots hand work to each other and the one folder that survives an update are written out in the article ↓

整合