4 ms·

Anyone using Claude for processing sensitive information should be wondering how often it ends up in front of a humans eyes as a false positive

jacquesm 11mo ago
Anyone using non-self hosted AI for the processing of sensitive information should be let go. It's pretty much intentional disclosure at this point.
- defrost 11mo ago
  Worst local (Australia) example of that Following a public statement by Hansford about his use of Microsoft's AI chatbot Copilot, Crikey obtained 50 documents containing his prompts... FOI logs reveal Australia's national security chief, Hamish Hansford, used the AI chatbot Copilot to write speeches and messages to his team. (subscription required for full text): https://www.crikey.com.au/2025/11/12/australia-national-security-chief-ai-speech-writing/ https://www.crikey.com.au/2025/11/12/australia-national-secu... It matters as he's the most senior Australian national security bureaucrat across five eyes documents (AU / EU / US) and has been doing things that makes the actual cyber security talent's eyes bleed.
  - jacquesm 11mo ago
    Holy crap that is such a bad look. That guy should immediately step down and if he doesn't he should be let go.
    - le-mark 11mo ago
      That wasn’t my first thought. My first thought was; every senior executive everywhere is probably doing the same thing.
- FreakLegion 11mo ago
  Years ago people routinely uploaded all kinds of sensitive corporate and government docs to VirusTotal to scan for malware. Paying customers then got access to those files for research. The opportunities for insider trading were, maybe still are, immense. Data from AI companies won't be as easy to get at, but is comparable in substance I'm sure.
  - jacquesm 11mo ago
    That's absolutely insane. Aren't they owned by Google?
    - FreakLegion 11mo ago
      They are now, although to be clear there was (is?) nothing nefarious going on, just people not understanding that public submissions are available to VirusTotal's paying users. These days VT has private scanning, too, but the issue was always one-offs from random finance or investor relations teams. It's come up here and there in security, too, e.g. in https://www.directdefense.com/harvesting-cb-response-data-leaks-fun-profit/ https://www.directdefense.com/harvesting-cb-response-data-le....
  - lmc 11mo ago
    https://www.theregister.com/2023/07/21/virustotal_data_exposure_apology/ https://www.theregister.com/2023/07/21/virustotal_data_expos...
khalic 11mo ago
How is your comment related to this article?
- hn8726 11mo ago
  It looks like Anrhropic has great visibility into what hackers do. Why would it also see what legitimate users do?

jacquesm 11mo ago

Anyone using non-self hosted AI for the processing of sensitive information should be let go. It's pretty much intentional disclosure at this point.

defrost 11mo ago
Worst local (Australia) example of that Following a public statement by Hansford about his use of Microsoft's AI chatbot Copilot, Crikey obtained 50 documents containing his prompts... FOI logs reveal Australia's national security chief, Hamish Hansford, used the AI chatbot Copilot to write speeches and messages to his team. (subscription required for full text): https://www.crikey.com.au/2025/11/12/australia-national-security-chief-ai-speech-writing/ https://www.crikey.com.au/2025/11/12/australia-national-secu... It matters as he's the most senior Australian national security bureaucrat across five eyes documents (AU / EU / US) and has been doing things that makes the actual cyber security talent's eyes bleed.
- jacquesm 11mo ago
  Holy crap that is such a bad look. That guy should immediately step down and if he doesn't he should be let go.
  - le-mark 11mo ago
    That wasn’t my first thought. My first thought was; every senior executive everywhere is probably doing the same thing.
FreakLegion 11mo ago
Years ago people routinely uploaded all kinds of sensitive corporate and government docs to VirusTotal to scan for malware. Paying customers then got access to those files for research. The opportunities for insider trading were, maybe still are, immense. Data from AI companies won't be as easy to get at, but is comparable in substance I'm sure.
- jacquesm 11mo ago
  That's absolutely insane. Aren't they owned by Google?
  - FreakLegion 11mo ago
    They are now, although to be clear there was (is?) nothing nefarious going on, just people not understanding that public submissions are available to VirusTotal's paying users. These days VT has private scanning, too, but the issue was always one-offs from random finance or investor relations teams. It's come up here and there in security, too, e.g. in https://www.directdefense.com/harvesting-cb-response-data-leaks-fun-profit/ https://www.directdefense.com/harvesting-cb-response-data-le....
- lmc 11mo ago
  https://www.theregister.com/2023/07/21/virustotal_data_exposure_apology/ https://www.theregister.com/2023/07/21/virustotal_data_expos...

khalic 11mo ago

How is your comment related to this article?

hn8726 11mo ago
It looks like Anrhropic has great visibility into what hackers do. Why would it also see what legitimate users do?