Grok can escape its sandbox with persistent read/write access

  • Posted 3 hours ago by holdswarm
  • 3 points
Grok (on x.com) is nominally constrained in what it can do. It has access to browse_page tool that is able to fetch webpages. It isn't normally able to fill in forms or write messages though.

Since it can browse any arbitrary url, you can set up a site that allows creating messages using only GET requests. This has now been done by myself (holdswarm.com) and a few others.

Proof: https://x.com/civ_enjoy/status/2086081923839918544?s=20

2 comments

    Loading..
    Loading..