I bet they post sensitive data to all platform which may help them.
Also I guess chat with Microsoft teams or slack is ok.
Employees are feeding sensitive data to ChatGPT, raising security fears
301–310 of 355 posts
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#302Earlier quoted context omitted.
I'm doing that since day one. I can't believe people are pasting real data into this corporate black boxes.
I simply don't give a crap if my employer loses data. I don't care if my carelessness costs my employer a billion bucks down the line as I won't be working for them next year.
Why don’t you feel any responsibility?
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#303We block ChatGPT, as do most federal contractors. I think it’s a horrible exploit waiting to happen: - there’s no way they’re manually scrubbing out sensitive data so its bound to spill out from the training data when prompting the model - OpenAI is openly storing all this data they’re collecting to the extent that they’ve had several leaks now where people can see others’ conversations and data. We are one step away…
This really depends on the cost/benefit tradeoff for the entity in question. If using ChatGPT makes you X% more productive (shipping faster / lowers labor costs / etc), but comes with Y% risk of data leakage, is that worth it in expectation or not? I would argue that there definitely exist companies for which it's worth the tradeoff. By the way, OpenAI says they wont use data submitted through its API for model train…
> If using ChatGPT makes you X% more productive (shipping faster / lowers labor costs / etc), but comes with Y% risk of data leakage
X and Y are not alike, and should not be compared. X is a benefit to you(r employer), whereas Y is a risk to the customer who has entrusted you with their data.
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#304Earlier quoted context omitted.
There's a dev here who is using ChatGPT extensively in his work. The rest of the team is just waiting for him to get caught and fired. Sharing company data with unapproved external entities is very definitely a firing offense.
Glad I work for a company where the CEO pays for everyones ChatGPT Plus for the devs. If you think your code is special then you're wrong.
My code is "special" in the fact that the act of sharing it can carry civil and criminal liabilities for myself, essentially threatening my well-being and freedom.
Not my place legally or ethically to share code with 3rd parties that I've been paid to read and write.
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#305We block ChatGPT, as do most federal contractors. I think it’s a horrible exploit waiting to happen: - there’s no way they’re manually scrubbing out sensitive data so its bound to spill out from the training data when prompting the model - OpenAI is openly storing all this data they’re collecting to the extent that they’ve had several leaks now where people can see others’ conversations and data. We are one step away…
> We block ChatGPT, as do most federal contractors. I think it’s a horrible exploit waiting to happen:
Do you also block pastebin? Anything else that has a web form? How is ChatGPT special compared to any other service on the Internet where people can paste data in a form?
I mean... I see the problem, but I think one needs to realize that it's a far more generic problem that has basically nothing to do with ChatGPT and AI. If people paste confidential data into random webpages that's of course bad. But if you block ChatGPT because you fear that, it means you expect that people might do that. And then your problem is not ChatGPT, but lack of awareness what is confidential data and what to do with it.
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#306We block ChatGPT, as do most federal contractors. I think it’s a horrible exploit waiting to happen: - there’s no way they’re manually scrubbing out sensitive data so its bound to spill out from the training data when prompting the model - OpenAI is openly storing all this data they’re collecting to the extent that they’ve had several leaks now where people can see others’ conversations and data. We are one step away…
> We block ChatGPT, as do most federal contractors. I think it’s a horrible exploit waiting to happen: Do you also block pastebin? Anything else that has a web form? How is ChatGPT special compared to any other service on the Internet where people can paste data in a form? I mean... I see the problem, but I think one needs to realize that it's a far more generic problem that has basically nothing to do with ChatGPT a…
Because "awareness only" has such a great track record when it comes to security-adjacent issues, and totally satisfies auditors/customers/regulators/...?
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#307Earlier quoted context omitted.
I'm doing that since day one. I can't believe people are pasting real data into this corporate black boxes.
What about Google Docs, Office 365, Github, AWS, Azure, Google Cloud, JIRA, Zendesk, etc? What is different about ChatGPT (if anything)?
Doesn't OpenAI explicitly say that your Q/A on the free ChatGPT are stored and sent to human reviewers to be put in their RL database? Now of course we can't be sure what google, AWS etc do with the data on disks there, but it would be a pretty big scandal if some whistleblower eventually comes out and say that google employees sit and laugh at private bucket contents on GCP or private Google Docs. So there's a difference in stated intention at least..
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#308We block ChatGPT, as do most federal contractors. I think it’s a horrible exploit waiting to happen: - there’s no way they’re manually scrubbing out sensitive data so its bound to spill out from the training data when prompting the model - OpenAI is openly storing all this data they’re collecting to the extent that they’ve had several leaks now where people can see others’ conversations and data. We are one step away…
> We block ChatGPT, as do most federal contractors. I think it’s a horrible exploit waiting to happen: Do you also block pastebin? Anything else that has a web form? How is ChatGPT special compared to any other service on the Internet where people can paste data in a form? I mean... I see the problem, but I think one needs to realize that it's a far more generic problem that has basically nothing to do with ChatGPT a…
> Do you also block pastebin? Anything else that has a web form?
pastebin and indeed most things that has some sort of public webform is blocked in all the companies I have worked with.
It is probably a losing battle though, as it is very hard to block everything without default deny.
Paradoxically, maybe GPT could be used to veto websites on first access :)
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#309Earlier quoted context omitted.
Sure, but humans do that all the time as well
Humans are a lot better at "I don't know how to do this; hey Alice, can you look this over if you've got a sec and tell me if I'm making a noob mistake"
Perhaps the actual phenomenon is that humans are much better at saying "Alice wrote this code, she's pretty good at scripting but she might have made a noob mistake, better check it", or even "I wrote this code.." than they are at saying "ChatGPT wrote this code, but that application is not guaranteed to have correctly identified my problem, but may have just returned something that seems right both to the statistical model and to me, but which is actually deeply flawed, better check it".
Re: Employees are feeding sensitive data to ChatGPT, raising security fears
#310Earlier quoted context omitted.
I regularly say shit that pisses people off here and I have never been shadow banned. It sounds like your "hard truths" are something other than just "hard truths", and/or you have a persecution complex.
Your Karma is over 7000, if you get downvoted your stuff is still visible.
if you didn't use throwaway accounts your karma would presumably be much higher?