Hacker News — 2026-07-12#

Top Story#

What xAI’s Grok Build CLI Actually Sends to xAI A meticulous reverse-engineering teardown reveals that xAI’s official Grok Build CLI secretly uploads entire user repositories—including unredacted .env files—to a Google Cloud storage bucket. The multi-gigabyte background uploads occur regardless of what files the agent actually reads, and explicitly turning off the “Improve the model” setting does not stop the exfiltration.

Front Page Highlights#

Claude Code sends 33k tokens before reading the prompt; OpenCode sends 7k A proxy-based token audit reveals how much context overhead popular AI coding harnesses are silently burning. Claude Code proved exceptionally hungry and cache-inefficient, frequently rewriting tens of thousands of prompt-cache tokens mid-session and resulting in massive hidden costs compared to the much leaner OpenCode.

Hacker News — 2026-05-05#

Top Story#

The single most explosive thread today is a forensic takedown of Google Chrome silently installing a 4 GB Gemini Nano model on users’ machines without consent. Beyond the obvious privacy and disk-space outrage, the technical community is digging into the absurdity of the rollout: the highly visible “AI Mode” in the browser’s omnibox still routes queries to the cloud, meaning the 4GB local model is a pre-staged, unrequested resource that costs immense global bandwidth for features hidden behind obscure context menus.