Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Employees are feeding sensitive data to ChatGPT, raising security fears

darkreading.com

Post reply on HN
Print view View original

141–150 of 355 posts

Re: Employees are feeding sensitive data to ChatGPT, raising security fears

#141

Post by deltree7 »

Classic fearmongering article targeted to HN crowd.

i) In this world, there are very few people whose private conversation is worth anything to anybody (celebrities, journalists -- so around 10,000 people)

ii) A tiny tiny %age of information is truly secret (mostly private keys).

iii) Business strategies are mostly a result of execution, not any 'trade secrets'. Meta will succeed because it has executed it's metaverse strategy, not because they kept the metaverse strategy secret.

People who take risks and not care about irrelevant details (just like how they took risk with internet shopping, cloud, SaaS) will win. Losers like the ones who thought AWS will steal their data will be left behind

Re: Employees are feeding sensitive data to ChatGPT, raising security fears

#143

Post by beiller »

walthamstow wrote: post #92
knodi123 wrote: post #44

Earlier quoted context omitted.

I can host llama's 7b model internally. It hallucinates more often than not and has a tendency to ramble, but dammit it's local and secure!

What's it like with code, documentation, regex, etc? That's all I use ChatGPT for. I don't need it to be able to write poetry.

I did not verify this regex, on the very surface scan seems OK:

./main -m ./models/7B/ggml-model-q4_0.bin -t 4 --temp 0.7 --top_k 40 --top_p 0.5 --repeat_last_n 256 --repeat_penalty 1.17647 -n 1024 -p $'Here is a handy short form regex to validate an email address: '

Here is a handy short form regex to validate an email address: ^([a-zA-Z0-9_.+-]+@[a-zA-Z0-9.-]+\.[a-z\.]{2,6})+$ The first character can be either uppercase or lower case. The second group must contain at least one letter and the third group may contain any number of characters (up to 5). The last part ensures that it ends with @ followed by two more letters separated by dots. If you want to make sure that your input string contains only valid characters for emails then use this regex instead: \A[\w.]@[\w.]\.\w{1,4}\z

Re: Employees are feeding sensitive data to ChatGPT, raising security fears

#144

Post by fnordpiglet »

kccqzy wrote: post #140
fnordpiglet wrote: post #119

Earlier quoted context omitted.

Was?

Well it was, until Google Workspace (G Suite) came along and provided essentially an enterprise version of Gmail.

I still question the wisdom of giving data to the worlds largest spyware company that makes its money by converting mass surveillance into dollars.

Re: Employees are feeding sensitive data to ChatGPT, raising security fears

#146

Post by Jensson »

philsquared_ wrote: post #62
noncoml wrote: post #58

Earlier quoted context omitted.

> Google takes your data and sells it. Literally making your data available to the highest bidder. Even if they are not doing it now(?), what makes you think that they will not do so in the future? It's not like your data has an expiration date.

Because they are completely different business models. If OpenAI decides to become an advertising behemoth then I would show concern. Right now they use your data for training (when they use it).

OpenAI is selling others data in their model responses. Selling others data is their main business model.

If it uses user data to train their models other users could ask "Show me the code for gmail spam filters", and if it was trained on engineers refactoring that spam filter in ChatGPT chances are it would give you the code. If that doesn't count as "selling user data" I don't know what is. They not only sell it, they nicely package and rewrite it to make it easy to avoid copyright claims!

Re: Employees are feeding sensitive data to ChatGPT, raising security fears

#147

Post by PeterisP »

nostromo wrote: post #131
cuuupid wrote: post #5

We block ChatGPT, as do most federal contractors. I think it’s a horrible exploit waiting to happen: - there’s no way they’re manually scrubbing out sensitive data so its bound to spill out from the training data when prompting the model - OpenAI is openly storing all this data they’re collecting to the extent that they’ve had several leaks now where people can see others’ conversations and data. We are one step away…

Does blocking ever work? People are smart and usually just work around them.

It works in the sense that it does add an extra "reminder" and requires specific intent. I mean, in this scenario all the people already have been informed that they're absolutely not allowed to do things like that, but if someone has forgotten that, or simply is careless and just wants to "try something out" then if it's unblocked they might actually do it, but if they need to work around a restriction, that forces them to acknowledge that there is a restriction and they shouldn't try to work around it even if they can.

Re: Employees are feeding sensitive data to ChatGPT, raising security fears

#148

Post by yathrowaway01 »

bcrosby95 wrote: post #122
yathrowaway01 wrote: post #103

Earlier quoted context omitted.

That's because accounts get shadow banned all the time when people get upset when you point out hard truths. If you're copy pasting API keys or such into ANYTHING, you probably shouldn't be a programmer to begin with. It's like people who use root account key/secret credentials in their codebase. It's not AWSs fault you got a large bill or got hacked, its because you're dumb.

I regularly say shit that pisses people off here and I have never been shadow banned. It sounds like your "hard truths" are something other than just "hard truths", and/or you have a persecution complex.

Your Karma is over 7000, if you get downvoted your stuff is still visible.

Re: Employees are feeding sensitive data to ChatGPT, raising security fears

#149

Post by q845712 »

raincole wrote: post #130
w_for_wumbo wrote: post #7

This is the issue with a tool so powerful, you can't just tell people not to use it, or to use it responsibly. Because there's too much incentive for them to use it. If it saves hours of a persons' workday, and they're not seeing any of the harm caused from data leakage, there's no incentive for them to not use it. Which is why a private option is so critical. To not fight against human nature, means providing an abi…

> you can't just tell people not to use it Uh, why can't you tell people not to use it...? If security is that important for your company, of course you can tell your employees which tools to use. A fun fact: in many areas of TSMC, smart phones are banned. No one says "you can't just tell people not to use smart phones."

https://www.bleepingcomputer.com/news/technology/fitness-tra...

Re: Employees are feeding sensitive data to ChatGPT, raising security fears

#150

Post by kristianp »

yathrowaway01 wrote: post #81
JohnFen wrote: post #63

Earlier quoted context omitted.

There's a dev here who is using ChatGPT extensively in his work. The rest of the team is just waiting for him to get caught and fired. Sharing company data with unapproved external entities is very definitely a firing offense.

Glad I work for a company where the CEO pays for everyones ChatGPT Plus for the devs. If you think your code is special then you're wrong.

Does chatgpt plus collect data for training, or does it have more privacy than the free offering?
Post reply on HN