Grok Bot 的 Windows 应用程序也包含一个需要电子邮件地址的受限工作流

该客户端包含 mail.grokbot.com 地址创建功能以及一个多收件箱视图,当列出的地址少于 10 个时会显示另一个创建控件。RuntimeWire 在报道 ChatGPT 代码中类似的电子邮件地址设置流程后不久发现了该工作流;在这两种情况下,访问和投递仍未得到验证。

By · Published

RUNTIMEWIRE INVESTIGATION — Original analysis

Original reporting by RuntimeWire, based on reverse engineering, testing.

为何重要

Windows 客户端包含用于请求电子邮件地址的受限路径,但该软件包并未确定用户是否能够获得电子邮件地址、适用的访问规则或邮件投递是否正常工作。

Reporting record

Finding

RuntimeWire's static inspection of a verified Windows x64 package found client-side code for creating and listing @mail.grokbot.com inboxes, including a multiple-inbox creation control shown while fewer than 10 addresses are listed.

How we verified

Methods: reverse engineering, testing.

Tested versions:

  • Grok Bot Windows x64 0.68.1 (statically inspected; not run)

Reproduction

RuntimeWire partially reproduced the finding.

Reverse engineer binary and CNTRL-F 'new features'

Company response

The company was not contacted before publication.

An open Windows laptop with an obscured application screen sits on a desk during an examination of the Grok Bot email-address workflow.

Grok Bot 在其 Windows 客户端中包含了一个受限的电子邮件地址工作流程,地址创建位于 mail.grokbot.com,并且在列出的收件箱少于 10 个时有第二个界面可提供另一个收件箱。RuntimeWire 在 10 月 7 日的检查中,在一个 已验证的 Windows x64 包 中发现了该实现。代码表明客户端被构建为请求并显示收件箱;但并未证明用户可以认领一个地址或发送和接收邮件。…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.