5 ms·

ChatGPT leaks user credit card details

40 points by PikelEmi 4y ago

johnnyo 4y ago
The headline is a bit misleading. It's nothing the AI did, it was a misconfiguration of the website itself.
- patrakov 4y ago
  I wouldn't 100% call this misconfiguration. This bug in redis-py was discussed already. Nobody is insured from this.
- nomel 4y ago
  > The user’s first and last name, email address, payment address, the last four digits (only) of a credit card number, and credit card expiration date. Full credit card numbers were not exposed at any time, So, the last four digits, which is also on most receipts I've thrown in the trash [1]. I'm much more annoyed at the email address and home address relation. 1. https://security.stackexchange.com/questions/145070/how-many-digits-of-a-visa-card-number-can-vendors-disclose-on-receipts https://security.stackexchange.com/questions/145070/how-many...
  - barrysteve 4y ago
    What horror stories happen when people in general, discover your email and home address? Probably not a good question to ask, but I am wondering..
    - tomodachi94 3y ago
      In certain circles, there's always a risk of swatting[1]. If you're anonymous online and your physical address is leaked, that could lead to doxxing[2] that could eventually lead to the aforementioned swatting. N.b. Swatting is mostly a US thing. [1]: https://en.m.wikipedia.org/wiki/Swatting https://en.m.wikipedia.org/wiki/Swatting [2]: https://en.m.wikipedia.org/wiki/Doxing https://en.m.wikipedia.org/wiki/Doxing
    - nomel 4y ago
      I don't like it when strangers on the internet know where I live, based on an extremely public string. For an example of the discomfort, and so we're in a similar mental framing, could you please respond to this with your email address and home address? ;P
      - barrysteve 4y ago
        Hahah the temptation! I understand the discomfort. The celebrities and even d-list celebs tell some 'interesting' tales about unwanted fan interactions.
hotpathdev 4y ago
With all this downtime and reduced interface, are pro users expecting a refund on this months service ?

40 points by PikelEmi 4y ago

johnnyo 4y ago

The headline is a bit misleading. It's nothing the AI did, it was a misconfiguration of the website itself.

patrakov 4y ago
I wouldn't 100% call this misconfiguration. This bug in redis-py was discussed already. Nobody is insured from this.
nomel 4y ago
> The user’s first and last name, email address, payment address, the last four digits (only) of a credit card number, and credit card expiration date. Full credit card numbers were not exposed at any time, So, the last four digits, which is also on most receipts I've thrown in the trash [1]. I'm much more annoyed at the email address and home address relation. 1. https://security.stackexchange.com/questions/145070/how-many-digits-of-a-visa-card-number-can-vendors-disclose-on-receipts https://security.stackexchange.com/questions/145070/how-many...
- barrysteve 4y ago
  What horror stories happen when people in general, discover your email and home address? Probably not a good question to ask, but I am wondering..
  - tomodachi94 3y ago
    In certain circles, there's always a risk of swatting[1]. If you're anonymous online and your physical address is leaked, that could lead to doxxing[2] that could eventually lead to the aforementioned swatting. N.b. Swatting is mostly a US thing. [1]: https://en.m.wikipedia.org/wiki/Swatting https://en.m.wikipedia.org/wiki/Swatting [2]: https://en.m.wikipedia.org/wiki/Doxing https://en.m.wikipedia.org/wiki/Doxing
  - nomel 4y ago
    I don't like it when strangers on the internet know where I live, based on an extremely public string. For an example of the discomfort, and so we're in a similar mental framing, could you please respond to this with your email address and home address? ;P
    - barrysteve 4y ago
      Hahah the temptation! I understand the discomfort. The celebrities and even d-list celebs tell some 'interesting' tales about unwanted fan interactions.

hotpathdev 4y ago

With all this downtime and reduced interface, are pro users expecting a refund on this months service ?