Grok Bot

(x.ai)

77 points by rvz5 hours ago

25 comments

  • drop_star6 minutes ago
    So OpenClaw that steals your data and profiles you for the US gov. No thanks.
  • anthonyskipper38 minutes ago
    The scariest part of the interaction is the first video at <a href="https:&#x2F;&#x2F;x.ai&#x2F;bot" rel="nofollow">https:&#x2F;&#x2F;x.ai&#x2F;bot</a> where the bot just snags your creds from the browser and takes over. So many people are going to give x all their data and creds.
  • jjcm3 hours ago
    I&#x27;ve been using it for the last month or so. IMO in the same way we went from tab complete -&gt; prompts -&gt; agents, this feels like a next step on that evolution. I highly suspect others will be following suit. I was surprised with how much it felt natural to interact with agents in this way.<p>Biggest advantage is each one owns its own routines, context, and domain, and they can communicate between each other. Similar to hermes they build out their own skills, but by keeping the bots separated by domains, you end up getting better results out of them.<p>Additionally though each one has their own computer, which means async work feels like it <i>actually works</i>. I haven&#x27;t had to juggle worktrees for the last month.<p>Biggest downsides are token expenditure. I&#x27;ve used more tokens this month than not this month. That&#x27;s not a typo - I&#x27;ve used less tokens in the last 5 years prior to this month than I have this month. Always on perpetual agents use a LOT of tokens. IMO this is building for the future state where tokens are vastly cheaper, ie in a post-ASIC world.<p>The coolest thing I had it do for me was sourcing fabric for swag: <a href="https:&#x2F;&#x2F;image.non.io&#x2F;d83664c1-5807-4a18-abe4-41928c198410.webp" rel="nofollow">https:&#x2F;&#x2F;image.non.io&#x2F;d83664c1-5807-4a18-abe4-41928c198410.we...</a><p>I wanted to make something that didn&#x27;t feel like just my logo on a shirt, so I had one of my bots reach out to ~40 fabric suppliers in vietnam, negotiate prices, lock one in, and get samples made. First samples should be finished today. It&#x27;s been something I&#x27;ve wanted to do for ages, so it was cool seeing it actually happen. The fabric supplier bot worked with one of my prototyper bots to create a randomly generated pattern using my logo, which it then sent as a .ai file to the supplier.
    • pavel_lishin1 hour ago
      &gt; <i>I wanted to make something that didn&#x27;t feel like just my logo on a shirt, so I had one of my bots reach out to ~40 fabric suppliers in vietnam, negotiate prices, lock one in, and get samples made.</i><p>Isn&#x27;t this one of the problems foreseen with this? For you, it was a single prompt - for 40 companies, this probably took up some time.<p>What happens when fifty people fire off a 15-second &quot;get me a shirt&quot; prompt? When five hundred, five thousand, five million do?
      • raincole1 hour ago
        Isn&#x27;t the answer obvious? The 40 companies will have to use AI to filter the messages too.<p>If your business is selling tokens, it&#x27;d be <i>extremely</i> lucrative for you if the whole society relies on tokens to perform basic operations. That&#x27;s where we&#x27;re heading to.
        • zeafoamrun17 minutes ago
          It&#x27;s crazy dude, whenever we put up a job ad it&#x27;s filled with thousands of LLM generated fake candidates in a few days.<p>Looking at the examples they show here it is making more sense. Also where all the &quot;content&quot; on LinkedIn comes from.
          • aliasxneo2 minutes ago
            Only way I was able to get a job recently was via one of a few recruitment firms I was working with. Presumably this will become more common. Basically vendors &quot;selling&quot; actual real humans they vetted.
          • XCSme12 minutes ago
            Will we have any way to know if a submission was done by a human or a bot?
        • slg21 minutes ago
          Everything is becoming wildly inefficient, all in the name of improved efficiency.
      • jjcm1 hour ago
        A reasonable pushback. It originally only reached out to 5, didnt hear back, so reached out to 5 more. I personally pushed it to reach out to an additional 30 after that.<p>One of the difficulties of sourcing this is a lot of the suppliers in vietnam are only contactable via whatsapp. Emails are monitored far less. It&#x27;s one of the reasons I haven&#x27;t been successful with this in the past despite trying - it&#x27;s a very word-of-mouth network.
        • pavel_lishin1 hour ago
          I don&#x27;t think your reply addresses the point of my comment at all, which is that people <i>receiving</i> messages from AI agents isn&#x27;t scalable in the same way that people <i>sending</i> messages from AI agents is.
          • jbs78918 minutes ago
            And more generally, very often the recipient of an email bears more cost than the sender.<p>I heard this once and keep it in mind for every email I send. How do I reduce the cost of replying. Many times it means getting on the phone&#x2F; not sending the email at all.
            • XCSme10 minutes ago
              Isn&#x27;t a phone call like 10x more taxing than an email reply?
          • reaperducer14 minutes ago
            <i>I don&#x27;t think your reply addresses the point of my comment at all, which is that people receiving messages from AI agents isn&#x27;t scalable in the same way that people sending messages from AI agents is.</i><p>He left his phone number in his HN profile. Someone on HN should fire up a few thousand agents so he can personally learn what it&#x27;s like to be on the receiving end of &quot;efficiency&quot; at &quot;scale.&quot;
      • aaron69517 minutes ago
        [dead]
    • chasd0038 minutes ago
      Would be interesting to read a write up on this in detail. I have a similar use case I’ve been tasked to solve for a consulting client.
    • maherbeg1 hour ago
      The token usage is really interesting. I would imagine the most efficient thing is to keep the state of everything persisted, and past the cache expiration window, to automatically start a new session with the previously persisted state instead of just a long running conversation.<p>If someone solves this part of continual effective compaction + selective resetting at cache expiry, they&#x27;re going to make a ton of money. Right now, only the token insensitive can use these sweet features.
  • dgellow5 hours ago
    Are you all comfortable with the idea of agents running non stop with access to all your accounts? I would be so anxious all the time, thinking they would leak or delete my personal data, or get hijacked via prompt injection or a security vulnerability. I just cannot imagine using such a software without overview
    • mike_hearn2 hours ago
      They don&#x27;t need to have access to your accounts. You can give them their own accounts.
      • FuckButtons17 minutes ago
        Sure, but then what’s the use of them? Sounds like a very expensive tamagotchi.
    • sixtyj4 hours ago
      Prompt injection is my biggest fear. Imho it is almost impossible to make a sort of tool that would be successful in detecting an injection - but maybe some antivirus&#x2F;antimalware producers work on it…<p>The rest can be solved - separate account for agent spending (soon offered by your bank or neobank), separate email for agents (already exist) etc.
      • shaism1 hour ago
        According to Boris Cherny from Anthropic [1], the threat of prompt injection has been largely solved.<p>[1]: <a href="https:&#x2F;&#x2F;x.com&#x2F;bcherny&#x2F;status&#x2F;2086520950259118464" rel="nofollow">https:&#x2F;&#x2F;x.com&#x2F;bcherny&#x2F;status&#x2F;2086520950259118464</a>
        • stymaar53 minutes ago
          Sounds like “according John McAfee the threat of malware has been largely solved”.<p>Edit: it&#x27;s way worse than that: the actual figures says that Mythos “only” falls for prompt injection 2.6% of the times. Maybe for an ML engineer used to work with unreliable tools that sounds impressive, but for security purpose having a system that fails every 40 attempts is outright <i>catastrophic</i>. Imagine if your OS vendor only patched known security holes in a way that still let an attacker go through every 40 attempts…<p>And we&#x27;re just talking about known kind of prompt injection that are tracked by benchmarks, not any kind of 0-day vulnerability found by clever attackers.
          • andy9927 minutes ago
            They also don’t appear to consider false positives.<p>Pretty famously, false positives make some other Anthropic products unusable. If you treat them as zero cost it’s easy to drive down miss rate.
        • samtp56 minutes ago
          &quot;largely solved&quot; as in they the models they trained don&#x27;t fall for prompt injections as often but not &quot;largely solved&quot; as in the underlying issue is solved at all.
          • stymaar38 minutes ago
            Largely solved in “it only happens 2% of the times now”.<p>Don&#x27;t worry, you only have a 2% chance of having you bank account drained any time an attacker tries their chance.
  • XCSme14 minutes ago
    The eternal fight between bots and anti-bot systems.<p>The difference now is that big companies themselves promote&#x2F;offer bots, but they also don&#x27;t like to be scraped and use captchas.<p>What do we do now? Is it allowed to use automated tools to interact with any system? Is it allowed to scrape data? Are there any laws for this?<p>If we do things manually it is ok, but not if we use a bot?<p>Confusing (legal) times...
    • akersten10 minutes ago
      &gt; Is it allowed to use automated tools to interact with any system?<p>I&#x27;d hope so, because that&#x27;s what we&#x27;re doing right now. Your browser is automatically speaking HTTP for you so that you don&#x27;t have to.<p>Am I having a bit of a laugh? Maybe. But really, services should be user-agent agnostic. That&#x27;s the whole &quot;agent&quot; part of User Agent and the founders of the Internet had incredible foresight to name it this way.<p>&gt; Is it allowed to scrape data?<p>You mean, request data and receive what the other server voluntarily transmits?<p>&gt; Are there any laws for this?<p>There was a court case that said the above is fine, thankfully, since that&#x27;s how the internet works. There&#x27;s probably other cases going on and I&#x27;m sure at least one of them will have some unfortunate tech-illiterate result that makes things worse for anyone who understands this stuff.
  • kerv1 hour ago
    Are there any opensource app&#x2F;system that directly competes with a solution like this?
    • lukebuehler53 minutes ago
      Im working on one here: <a href="https:&#x2F;&#x2F;github.com&#x2F;smartcomputer-ai&#x2F;lightspeed" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;smartcomputer-ai&#x2F;lightspeed</a><p>The core is there. But there is some work to be done to have a nicer shell and all, which I’m currently focusing on.
    • blehn51 minutes ago
      <a href="https:&#x2F;&#x2F;buzz.xyz&#x2F;" rel="nofollow">https:&#x2F;&#x2F;buzz.xyz&#x2F;</a>
  • whimsicalism37 minutes ago
    How do they stop providers (like Amazon, etc.) from detecting and blocking these agents if they are running on cloud? I know that openai wasn&#x27;t able to avoid this which is why they moved to &#x27;computer use&#x27; on your local machine.<p>I almost wonder if this is a place where SpaceX, as an internet provider through starlink, has a unique advantage because websites are unable to block their networking as it could be residential starlink consumers.
    • theplumber16 minutes ago
      I think it creates a loop back connection, basically a reverse socks5 or a VPN if they are more sophisticated. That’s how I would do it. Note that I am also working on a such bot&#x2F;AI os and mine is better (for now) . If you have trillions, billions to or millions to invest feel free to reach out.
  • mrtksn33 minutes ago
    Interesting how everyone seems to be following OpenAI on UX. When I used Antigravity and they suddenly switched to Codex type UI I was very annoyed because I kept checking if this is Codex or Antigravity.<p>Either way, I still don&#x27;t think that computer use is solved. It worked horribly on Codex and Antigravity the last time I tried. Maybe I was doing something wrong.
  • natsucks5 hours ago
    everyone is shipping their in house solutions and they all seem...kinda the same.
    • taoh5 hours ago
      My feeling too. The foundation models and harnesses are commoditizing eventually because there&#x27;s no stickiness nor algorithmic supersecrets.
    • bakies1 hour ago
      Right... I&#x27;ve got this at home already
    • esafak5 hours ago
      That&#x27;s what everybody is excited about; being able to write whatever they want. They just say &#x27;Make a clone of Foo&#x27; and hey presto! The next step is to share your fabulous creation with the world. Lo, and behold, it looks just like Foo!
  • h14h28 minutes ago
    I&#x27;ve already been doing something very similar to this with OpenClaw, where I set up multiple different Telegram bots each with different system prompts to tune their personalty &amp; behavior.<p>It&#x27;s not trivial to do, and I never managed to get bot-to-bot communication working. Even with my janky setup, the experience is honestly pretty great. Grok Bot simplifies the setup for this about as far as I imagine is possible, and frankly it&#x27;s a pretty slick experience.<p>I fully expect this paradigm to catch on quickly.
  • wiradikusuma3 hours ago
    From FAQ: How is Grok Bot different from AI assistants? Bots have their own computer, so they can work inside your apps and tools. They also run in parallel, 24&#x2F;7, even when your laptop is closed.<p>How does it work with login-walled sites like LinkedIn then? And what does &quot;own computer&quot; mean? X provisions a &quot;private cloud&quot; a&#x27;la Apple for your Bot?
    • VariousPrograms3 hours ago
      The very first thing in their demo shows Grok logging in with the user&#x27;s username and password to a website, presumably so it can perform actions and the human can get the blame for them. Apparently this is marketing and not terrifying to people.
    • jjcm3 hours ago
      It&#x27;ll ask you to take over its computer to log in:<p><a href="https:&#x2F;&#x2F;image.non.io&#x2F;4022ec77-be07-4baa-97e8-ad9d8d9aeb8a.webp" rel="nofollow">https:&#x2F;&#x2F;image.non.io&#x2F;4022ec77-be07-4baa-97e8-ad9d8d9aeb8a.we...</a><p>After you do you just tell the bot you&#x27;re done logging in and it&#x27;ll keep driving. And yea, it&#x27;s a separate VM for each bot.<p>Source: had access for the last few weeks.
  • mike_hearn2 hours ago
    Neat. I haven&#x27;t had access to Grok Bot but I rolled my own async agent a while ago using systemd, Codex and old school UNIX stuff like sendmail&#x2F;postfix&#x2F;Maildirs. The model gets a rolling and continuously compacted context window in which mail arriving or timed wakeups cause Codex to resume a session with a prompt telling it to do stuff.<p>As it&#x27;s linked to an SMTP gateway I interact with it entirely by email. It also has API keys for my internal bug tracker, it has its own git forks of my repos and so on.<p>Over time it&#x27;s improved itself so it has adaptive wakeups, a nice monitoring dashboard so I can see what it&#x27;s doing if I want, a bunch of skills, a nightly wakeup to reorganize its home directories and so on. It keeps a private knowledge base in its home dir and writes its own skills, and it has a persistent todo list. When the todo list is populated it wakes up more frequently so it can break work up into chunks, a kind of basic Ralph loop.<p>I&#x27;ve found this email-centric paradigm works pretty nicely for me compared to just running a local CLI agent. For instance, I can assign a bug to &quot;Axiom&quot; (it named itself) in YouTrack and the email notification causes it to wake up and start work on the bug. If it gets blocked, it uses its API key to post a comment back to the ticket. If I think of something I just quickly email it, so I&#x27;m using Gmail instead of dealing with finicky ChatGPT style UIs that don&#x27;t have good support for labelling, compact UI and other nice things.<p>On older models its judgement about what to work on wasn&#x27;t that good, but with the latest GPTs it&#x27;s doing much better. I just got back from holiday and it had triaged and resolved over 25 different bugs, a nice selection too.<p>Because the whole thing runs in a dedicated UNIX user account it is able to modify its own configuration, which has helped as I developed this setup.<p>However, based on the blog post, Grok Bot sounds a fair bit more sophisticated. I haven&#x27;t felt a need for more than one bot as I can&#x27;t easily saturate even a single bot.<p>Cost: just uses my regular ChatGPT Plus subscription, $20&#x2F;month, plus of course the server it runs on (which is shared with lots of other stuff). I&#x27;m not working with it heavily, perhaps if I did I&#x27;d need the $200&#x2F;month sub.
  • no-name-here5 hours ago
    Pricing: <a href="https:&#x2F;&#x2F;x.ai&#x2F;bot" rel="nofollow">https:&#x2F;&#x2F;x.ai&#x2F;bot</a>
    • pbronez4 hours ago
      Interesting that the pricing is &quot;Cursor Ultra&quot; and &quot;Cursor Premium Teams.&quot; This very much feels like the Code --&gt; Cowork product iteration.
  • jujube31 hour ago
    Grok lobster! (Rock lobster music starts playing)
  • LaurensBER5 hours ago
    Pricing: 120&#x2F;200 USD per month, per employee.<p>This is an interesting idea although I&#x27;m not sure how many companies are comfortable with giving SpaceXAI access to all your files and data. Outside of America this is, most likely, not going to fly.
    • KumaBear30 minutes ago
      The US government maybe? Wish I could type &#x2F;s
  • surprisetalk3 hours ago
    This seems like a very clever product move from X.ai<p>I wonder if they&#x27;re going to try and compete against Slack with X.com chat?
  • jknoepfler5 hours ago
    Somehow the American AI industry managed to create a product I trust <i>less</i> than existing commercial offerings. Kudos, that is actually pretty impressive. Considering the stakes, one might also call it foolish. But I&#x27;m sure they&#x27;ve done their market research, they&#x27;ve identified their product niche and they&#x27;re racing to meet it at the bottom.
  • Computer01 hour ago
    I am unsure if this is the end all be all but it appears preferable to claude code desktop to me.
  • basisword5 hours ago
    Interesting. Unfortunately Musk&#x27;s personal brand is so poisonous that I would never let him anywhere near my data. I&#x27;m curious if big businesses will have similar concerns and avoid tools from SpaceXAI regardless of how they are? I guess lots are already using it by default since the Cursor acquisition.
    • vizzier5 hours ago
      <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=48892468">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=48892468</a> plus the whole cursor brand should be tainted alongside it after this malarkey
    • datadrivenangel5 hours ago
      Cursor by inertia, but the X ownership is a big X against it...
    • Adrig1 hour ago
      Musk burned billions in brand value by renaming Twitter, and he&#x27;ll be doing the same with Cursor. The Cursor brand was the only wedge he had with enterprise customers, who seem to avoid Grok products altogether
    • taoh5 hours ago
      Curious why is Musk&#x27;s personal brand poisonous? Is it related to his personal character or business behaviors?
      • bakies1 hour ago
        Curious how you&#x27;ve been living under that rock
      • tuesdaynight2 hours ago
        If you have the time and are willing to do it, go check his Twitter profile. You can agree with him, but you will get it why some companies would avoid his products
      • RunSet1 hour ago
        Yes.
      • platevoltage1 hour ago
        There&#x27;s no way this is a real question.
      • slowmovintarget4 hours ago
        He is now an enemy of the Left. So those are ideological statements.
        • barre1 hour ago
          Enemy of the left? He is spewing inaccuracies and posting nazi stuff. It&#x27;s about being a decent human being.
          • Uhhrrr31 minutes ago
            What nazi stuff did he post?
  • tonyhart75 hours ago
    so like OpenClaw ???
    • basisword5 hours ago
      Like a hosted OpenClaw with, I assume, more guardrails.
      • 2PqboPPmKegvanx4 hours ago
        &gt;with, I assume, more guardrails<p>with Grok, that&#x27;s a tremendous assumption
        • javcasas1 hour ago
          It will protect Elon and friends.<p>Ah, you mean guardrails for _your_ protection...!
  • jjcm3 hours ago
    Dupe of <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=49261532#49263241">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=49261532#49263241</a>.<p>Dang - might be worth merging these two.
    • redox991 hour ago
      That one for some reason is [flagged]
  • tonetheman1 hour ago
    [dead]
  • jesse_dot_id1 hour ago
    I think perhaps I won&#x27;t trust anything that ever gets released by this company, likely in perpetuity.
    • thih953 minutes ago
      Anecdotally, same; recently I stopped using Cursor after learning that XAI now owns it.
    • whynotmaybe26 minutes ago
      It should be studied how we reached a point where we trust more a Chinese company, that&#x27;s well know for being state controlled, vs an American company because it seems they could do worse. Still no idea what &quot;worse&quot; it could do because we&#x27;ve reached the threshold where plague and cholera are intertwined and every possible outcome seems abusive.
    • agile-gift02621 hour ago
      There are two companies that have lost my trust, probably forever: X and Meta. I don&#x27;t see myself ever trusting anything coming out of either of these companies ever again
    • dyauspitr1 hour ago
      Only thing I trusted was the “porn generator” on grok imagine because it was beyond good at what it did. They nerfed that so they’re back to nothing.
    • bilsbie51 minutes ago
      [flagged]
  • vorticalbox4 hours ago
    GitHub login on iOS is just broken.<p>GitHub gives 404 after logging in so I can’t event try it.
  • Adrig3 hours ago
    Alt link to the landing page if needed: <a href="https:&#x2F;&#x2F;x.ai&#x2F;bot" rel="nofollow">https:&#x2F;&#x2F;x.ai&#x2F;bot</a><p>Although I&#x27;ll probably never use Grok, this is an interesting release. I always thought GPT work and Claude Cowork are a bit awkward in their positioning. I&#x27;m still not sure what the real difference is with standard chat. This looks like the same thing with seamless memory and skills creation.<p>This seems like the middle ground between work mode and OpenClaw&#x2F;Hermes (which I&#x27;ve never tried, too scared to mess something up). I think the humanization of the agents is cute and makes sense UX wise. I hope to see alternatives soon.