Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AWS Bedrock to require sharing data with Anthropic for Mythos and future models

news.ycombinator.com

Post reply on HN
Print view View original

111–120 of 274 posts

Re: AWS Bedrock to require sharing data with Anthropic for Mythos and future models

#111

Post by pczy »

This policy applies across all providers. Here is the warning in Cursor: https://i.redd.it/7sfyker2ya6h1.png

Note that Anthropic has committed not to train models on logged data, so I don’t understand some of the concerns here. What exactly is your threat model? That Anthropic would train models contrary to their terms of service? That you trust them enough not to log your data prior to this, but not enough to trust their stated limits on how logged data will be used now?

Edit: I am partially convinced by some of the replies. However, it is worth noting that this change primarily affects Enterprise users. Data from consumer plans is already retained for 30 days. Source: https://privacy.claude.com/en/articles/10023548-how-long-do-...

Re: AWS Bedrock to require sharing data with Anthropic for Mythos and future models

#112

Post by brookst »

disgruntledphd2 wrote: post #88
UqWBcuFx6NV4r wrote: post #38

Earlier quoted context omitted.

Let’s be real, chances are that the people with a lot of money on the line have given it more thought than the passing thought that you gave this comment.

> Let’s be real, chances are that the people with a lot of money on the line have given it more thought than the passing thought that you gave this comment. In theory, definitely. But this seems like a really, really, really no-good seriously bad decision from Anthropic. Like, I get why they want this (and can see it from their perspective), but many of their largest clients literally cannot allow this without regula…

I’m not sure that’s true. Do the Fed and ECB sign off on telcos keeping records of who these companies called? Of car rental companies keeping records of where employees rented cars?

As long as it’s service telemetry, not used for model training, not inspected by humans, not analyzed except for service purposes… I don’t see the regulatory issue.

Are there any regulations covering what telemetry your service providers can keep? I’m skeptical, but even if so it would be trivial for Anthropic to exempt certain larger customers while still keeping the policy published as universal.

Re: AWS Bedrock to require sharing data with Anthropic for Mythos and future models

#114

Post by LunaSea »

dhruvrrp wrote: post #23
_pdp_ wrote: post #8

This is not going to fly in EU.

This will fly in EU. As long as the company states the time period for which it will keep data and clean it afterwards, gdpr has no issues with the data retention. Their carve-outs for safety (public interest) and legal are also valid exceptions in gdpr as well.

But companies will have to request consent from there users for their data to be shared to Anthropic.

Since Anthropic is a US company the GDPR compliance claims would be dubious and open to litigation by entities like NOYB.

Re: AWS Bedrock to require sharing data with Anthropic for Mythos and future models

#116

Post by brookst »

ChrisLTD wrote: post #96
irthomasthomas wrote: post #71

Earlier quoted context omitted.

Is it a larger model or just better trained? Anthropic does not actually claim it is a larger model anywhere that I can see.

If it’s not larger, it’d be tough to justify the massive price increase for using it.

Price is based on perceived value, not cost to produce. There is no international court of price justifications; if customers are willing to pay $X you can charge $X.

Re: AWS Bedrock to require sharing data with Anthropic for Mythos and future models

#117

Post by kevincox »

pczy wrote: post #111

This policy applies across all providers. Here is the warning in Cursor: https://i.redd.it/7sfyker2ya6h1.png Note that Anthropic has committed not to train models on logged data, so I don’t understand some of the concerns here. What exactly is your threat model? That Anthropic would train models contrary to their terms of service? That you trust them enough not to log your data prior to this, but not enough to trust…

It adds another provider that you have to trust with your data. Previously the assumption is that AWS was securely handling your data and you may have the data on AWS to start with anyways. Now you have two providers handling your data which doubles your risk if you trust them equally. If you think AWS has more robust data controls than Anthropic then it more than doubles your risk.

You may also have data management requirements such as allowed storage and transit countries as well as various certifications and contracts that you now need to extend to the second data processor.

Basically if you are already using AWS just adding the AWS-only bedrock model is legally easy and doesn't really change your security posture. If you need to now also log your data to Anthropic it makes the choice much more complicated.

Re: AWS Bedrock to require sharing data with Anthropic for Mythos and future models

#118

Post by _jab »

pczy wrote: post #111

This policy applies across all providers. Here is the warning in Cursor: https://i.redd.it/7sfyker2ya6h1.png Note that Anthropic has committed not to train models on logged data, so I don’t understand some of the concerns here. What exactly is your threat model? That Anthropic would train models contrary to their terms of service? That you trust them enough not to log your data prior to this, but not enough to trust…

Both can be true simultaneously. Anthropic can probably be trusted not to train on our Fable sessions, but eroding ZDR as the industry standard still sets a dangerous precedent.

There's a parallel between data retention and general mass surveillance. Sure, both systems can be used for purely benign purposes, with appropriate safeguards in place. But history shows that surveillance systems are alarmingly easy to co-opt for nefarious means, and model providers do have a heck of an incentive to leverage retained data for internal means.

This is worth protesting, even if I believe this policy itself does not immediately compromise my privacy.

Re: AWS Bedrock to require sharing data with Anthropic for Mythos and future models

#119

Post by HarHarVeryFunny »

pczy wrote: post #111

This policy applies across all providers. Here is the warning in Cursor: https://i.redd.it/7sfyker2ya6h1.png Note that Anthropic has committed not to train models on logged data, so I don’t understand some of the concerns here. What exactly is your threat model? That Anthropic would train models contrary to their terms of service? That you trust them enough not to log your data prior to this, but not enough to trust…

Once you start storing anything, whether credit card numbers or AI inputs, then there is possibility (if not in fact probability) that you'll be hacked and it will leak.

Given Anthropic's failure to secure their own source code, do you really trust them to secure yours?

Re: AWS Bedrock to require sharing data with Anthropic for Mythos and future models

#120

Post by zsoltkacsandi »

pczy wrote: post #111

This policy applies across all providers. Here is the warning in Cursor: https://i.redd.it/7sfyker2ya6h1.png Note that Anthropic has committed not to train models on logged data, so I don’t understand some of the concerns here. What exactly is your threat model? That Anthropic would train models contrary to their terms of service? That you trust them enough not to log your data prior to this, but not enough to trust…

We shipped software to governments and some big companies where this is a big no-no. Try to explain to your clients that during the development process some pieces were sent to Antrophic, and they might keep it for whatever reasons.
Post reply on HN