3 ms·

Good, this was a poorly conceived idea to build into an OS and turn on by default. It is the same problem with a lot of the AI tools right now. Using them for

Good, this was a poorly conceived idea to build into an OS and turn on by default. It is the same problem with a lot of the AI tools right now. Using them for your code, looking at your documents, etc etc. Unless you self host it or use a 'private' service from Azure or AWS (which they say is safe...) who knows where this information is ending up. This is a major leak waiting to happen. It scares me to think what kind of data has been fed into ChatGPT or some code tool that is just sitting somewhere in a log or something plaintext that could be found later.

bongodongobob 2y ago
That's not what this is about. This is about the M365 tools that you can add to outlook/teams etc. It needs separate licensing and isn't enabled by default, you have to pay for it and assign to users/groups.
- nerdjon 2y ago
  Microsoft's branding is seriously all over the place with all of this... They have at least 3 "Copilot" things now I think? Github copilot, the one built into Windows, and now this apparently. sigh. Regardless, my other points still stand. All of these tools remain a leak waiting to happen.
  - bongodongobob 2y ago
    It's a separate GPT instance specifically designed for corporate data per company, it not the same model the public uses. You could say Gmail is a leak waiting to happen because you're not hosting your own email server. This is a product specifically designed to work with enterprises data. The risk isn't any greater than Azure getting hacked or something.
    - blibble 2y ago
      > You could say Gmail is a leak waiting to happen because you're not hosting your own email server. I mean, Azure has had several tenancy breaches where attackers could move from one tenant to another > The risk isn't any greater than Azure getting hacked or something. example: https://www.theverge.com/2021/8/27/22644161/microsoft-azure-database-vulnerabilty-chaosdb https://www.theverge.com/2021/8/27/22644161/microsoft-azure-... they also had their master authentication keys leaked and didn't realise for 2 years https://www.bleepingcomputer.com/news/microsoft/microsoft-still-unsure-how-hackers-stole-azure-ad-signing-key/ https://www.bleepingcomputer.com/news/microsoft/microsoft-st... this one allowed the attackers to get into Microsoft executive's email accounts
BukhariH 2y ago
Recently, one of my friends asked ChatGPT about an internal tool with a funny name and ChatGPT seemed to know the meaning behind the name & options to run the tool properly for his usecase. We googled around to see if there was any information on the web about the tool & there’s nothing on Google which makes sense since it’s a boring internal tool for a financial services company. Ofcourse it could be a lucky guess or it could be an intern had uploaded the manual to GPT :D
- andsoitis 2y ago
  What’s the name of the tool?
  - droopyEyelids 2y ago
    It would not be impossible for a LLM to hallucinate a correct answer based on the name of a well named tool that had sane default choices in its architecture

bongodongobob 2y ago

That's not what this is about. This is about the M365 tools that you can add to outlook/teams etc. It needs separate licensing and isn't enabled by default, you have to pay for it and assign to users/groups.

nerdjon 2y ago
Microsoft's branding is seriously all over the place with all of this... They have at least 3 "Copilot" things now I think? Github copilot, the one built into Windows, and now this apparently. sigh. Regardless, my other points still stand. All of these tools remain a leak waiting to happen.
- bongodongobob 2y ago
  It's a separate GPT instance specifically designed for corporate data per company, it not the same model the public uses. You could say Gmail is a leak waiting to happen because you're not hosting your own email server. This is a product specifically designed to work with enterprises data. The risk isn't any greater than Azure getting hacked or something.
  - blibble 2y ago
    > You could say Gmail is a leak waiting to happen because you're not hosting your own email server. I mean, Azure has had several tenancy breaches where attackers could move from one tenant to another > The risk isn't any greater than Azure getting hacked or something. example: https://www.theverge.com/2021/8/27/22644161/microsoft-azure-database-vulnerabilty-chaosdb https://www.theverge.com/2021/8/27/22644161/microsoft-azure-... they also had their master authentication keys leaked and didn't realise for 2 years https://www.bleepingcomputer.com/news/microsoft/microsoft-still-unsure-how-hackers-stole-azure-ad-signing-key/ https://www.bleepingcomputer.com/news/microsoft/microsoft-st... this one allowed the attackers to get into Microsoft executive's email accounts

BukhariH 2y ago

Recently, one of my friends asked ChatGPT about an internal tool with a funny name and ChatGPT seemed to know the meaning behind the name & options to run the tool properly for his usecase. We googled around to see if there was any information on the web about the tool & there’s nothing on Google which makes sense since it’s a boring internal tool for a financial services company. Ofcourse it could be a lucky guess or it could be an intern had uploaded the manual to GPT :D

andsoitis 2y ago
What’s the name of the tool?
- droopyEyelids 2y ago
  It would not be impossible for a LLM to hallucinate a correct answer based on the name of a well named tool that had sane default choices in its architecture