Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CISA’s acting head uploaded sensitive files into public version of ChatGPT

politico.com

Post reply on HN
Print view View original

181–190 of 264 posts

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#181

Post by dmbche »

patrickmcnamara wrote: post #180
kulahan wrote: post #174

Earlier quoted context omitted.

You are uploading information to the chat system every time you use it. Doubly true if you’re having it analyze or work with documents. I presume pulling this data out is simple if you’re, say, China. There really no security to investigate. Without a private instance, it’s an absolute non-starter for anything classified.

> presume pulling this data out is simple if you’re, say, China Why would you presume that?

A nationstate has a lot of capacity to do things they shouldn't be doing

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#182

Post by kulahan »

defrost wrote: post #176
kulahan wrote: post #175

Earlier quoted context omitted.

Why would you? He’s literally the only person ostensibly in charge of the direction of the company. Destroying the company through a security exemption or a bad business deal - both are the leader making a poor decision due directly to his seat of power. Give sound advice of course, but ultimately it’s the exec’s decision make.

There are many reasons to deny a CEO ... in a good company structure such denials are circled back around to the board for review. Case in point: Allowing a CEO with no flight training to "have the keys" to the company because they want to take it for a spin. Sheparding Royalty in Monarchies has been a neccessary, delicate, loaded, and life threatening role for centuries. Being a C-suite Groom of the Stool isn't a ha…

I guess, but it’s his plane in a sense. If he wants to fly it and destroy the company, it’s his call. You just give the advice.

To be clear, I’m referring much more to CEO/owners - maybe more like Zuck than Bezos

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#183

Post by defrost »

kulahan wrote: post #182
defrost wrote: post #176

Earlier quoted context omitted.

There are many reasons to deny a CEO ... in a good company structure such denials are circled back around to the board for review. Case in point: Allowing a CEO with no flight training to "have the keys" to the company because they want to take it for a spin. Sheparding Royalty in Monarchies has been a neccessary, delicate, loaded, and life threatening role for centuries. Being a C-suite Groom of the Stool isn't a ha…

I guess, but it’s his plane in a sense. If he wants to fly it and destroy the company, it’s his call. You just give the advice. To be clear, I’m referring much more to CEO/owners - maybe more like Zuck than Bezos

No, it isn't - it's an asset owned by the company and shareholders - a CEO is an appointed or elected officer.

> To be clear, I’m referring much more to CEO/owners

Owners are what you are talking about. CEO / Owners are Owners and can act like owners.

That said, even owners need to be herded like cats when they are making bad decisions that impact tens of thousands of people on the basis of hubris and feels.

Somebody has to toss them shiny keys until the moment passes and they can make rational choices again.

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#184

Post by duxup »

It's so often the guys that are at the top who are the exception to the rules that are the problem.

I knew some folks who worked military communications and they broke rules regularly because senior officers just didn't want to walk across the street to do something secure...

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#185

Post by direwolf20 »

zzrrt wrote: post #108
0xy wrote: post #91

Earlier quoted context omitted.

And when the CCP compromised the law enforcement portal for every American ISP, stealing info on 80% of Americans, including both the Kamala and Trump campaigns, under the previous admin it was rock solid op-sec, presumably. Or when the previous admin leaked classified Iran attack plans from the Pentagon, so bad that they didn't even know whether they were hacked or not. You can at least pretend to make a technical a…

> CCP compromised the law enforcement portal for every American ISP Isn’t that the fault of the ISPs, not the admin?

It was a previous admin who mandated a backdoor. Predictably, enemies of the state got access to the backdoor.

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#186

Post by direwolf20 »

chrisco255 wrote: post #153
jfreds wrote: post #80

Earlier quoted context omitted.

Inviting a reporter from the Atlantic to your signal chat where you coordinate military plans has nothing to do with government being too big

If they are so leaky then why were they able to capture Maduro without a single American casualty? On one hand you claim incompetence and yet no one was tipped off. So maybe the Signal group chat wasn't as important as it was made out to be?

... because they didn't leak the Maduro operation? Also because Venezuela cooperated.

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#187

Post by gtowey »

BiscuitBadger wrote: post #24

There have to be GovCloud only LLMs just for this case. I swear this government is headed by appointed nephews of appointed nephews. I keep thinking back about that Chernobyl miniseries; head of the science department used to run a shoe factory. No one needs to be competent at their job anymore

> No one needs to be competent at their job anymore

That's actually the whole point. Placing incompetents in positions of authority means they know absolutely to whom they owe their loyalty. Because they know they would never have that job on merit. And since they don't really know how to do the job, they have no moral qualms about doing a poor job, or strong opinions on what they should be doing -- other than whatever mission their patron has given them. It's a tool used by weak leaders and it's unfortunately very effective.

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#188

Post by specialist »

scottyah wrote: post #157
nostrademons wrote: post #50

Earlier quoted context omitted.

Somehow I think that the weak link in our government security is at the top - the President, his cabinet, and various heads of agencies. Because nobody questions what they're allowed to do, and so they're exempt from various common-sense security protocols. We already saw some pretty egregious security breaches from Pete Hegseth.

Hah no, weak links are everywhere at all levels. The stories just don't generate revenue for news companies.

A fish rots from the head back.

Re: CISA’s acting head uploaded sensitive files into public version of ChatGPT

#190

Post by bandrami »

BiscuitBadger wrote: post #24

There have to be GovCloud only LLMs just for this case. I swear this government is headed by appointed nephews of appointed nephews. I keep thinking back about that Chernobyl miniseries; head of the science department used to run a shoe factory. No one needs to be competent at their job anymore

> I swear this government is headed by appointed nephews of appointed nephews.

No joke, the previous head of the State Department task force tasked with fighting corruption and nepotism in international contracting was named Rich Nephew. (He's a very talented career civil servant and I mean no shade I just find that hilarious.)

Post reply on HN