4 ms·
It's going to get interesting once Slack (or a partner) starts offering access to models which have been trained on conversations, either from your workspace or
by fweimer 3y ago
It's going to get interesting once Slack (or a partner) starts offering access to models which have been trained on conversations, either from your workspace or globally across all workspaces. Or maybe a combination of both (say, an industry-specific model that gets refined using recent data from your workspace). This could be quite useful. On the other hand, it looks like a security nightmare, even if the makers of the model think they have successfully mitigated the risks (which they always do, and never achieve).
Slack clarified their privacy policy in January that they consider message contents unrestricted data (that they can share freely) after it has been de-identified. Essentially, they changed “We may disclose or use aggregated or de-identified Other Information for any purpose” to “We may disclose or use aggregated or de-identified Information for any purpose”. “Other Information” does not include message contents, but plain “Information” does. Of course, de-identification (to protect user privacy) is likely to retain confidential business information, such as customer names, the technologies they use, and so on. I don't think it's an actual change to the policy, because this kind of permission was heavily implied by the privacy policy before.
It's unclear to me if the permission we have to grant individually, before we can use a Slack workspace, overrides contractual obligations negotiated by the workspace owner regarding message confidentiality. I assume that Slack has a “you pay for confidentiality” model, but I'm not sure how far it actually goes, given that change to the privacy policy.
- senko 3y agoI've seen people share passwords, secret keys, and bunch of other sensitive info in corporate Slack (ie. treat it the same as they'd treat eg GMail or Google Docs on a corp account). If Slack wakes up one day and starts feeding that into a generative AI that has the potential to regurgitate it wholesale, "nightmare" doesn't begin to describe it. And after the first incident, I imagine there'd be a flood of companies dumping Slack for anything else.