Hacker News new | ask | show | jobs
by hef19898 1226 days ago
I would honestely have doubts giving an unvetted third party, openai through ChatGPT, access to any prorietery or business relevant information.
6 comments

Agreed. One could however use a nonconfidential placeholder for the sensitive information and then replace it with the real information while revising the ChatGPT output.
Even that isn’t enough since even if you use codenames there will be still enough complementary information to fill the gaps especially if OpenAI knows who you are and if you are coming out of a corporate network they probably have enough information based on your internet connection alone.

So say you work for PharmaCorp and you are developing a new drug even if you turn the name of the drug into a code name and you ask OpenAI to write an email about say a failed or successful FDA approval process that’s more than enough for someone to take advantage of it and for you to get fired over it too…

Isn’t this the case for all web services as well? Google doc, office 365, aws, Google cloud
No, both from a service and contractural and technical perspective using most SAAS is quite different than using ChatGPT currently.

And overall there is a reason why the USG has their own private AWS zones…

I see, may be OpenAI should offer a plan to promise only run inferencing and not inspect the data. Or may be collaborate with amazon to serve the model on private AWS zones.
This is what Microsoft is doing by brining it to Azure.

It will allow you to use the inference model and possibly even train it further on your data without having all the inputs that are going into ChatGPT right now serve as future training content.

Essentially, yes. One reason not to use them.
Assuming MS isn't conducting corporate espionage in their customers, I'd say no, not the same thing.
If they just use your questions as further training data, the information you send to them might make it into other people's hands.
> I would honestely have doubts giving an unvetted third party, openai through ChatGPT, access to any prorietery or business relevant information

I have done this, but I fill sensitive information with bullshit terms.

I have just uploaded the results for my analysis of <bullshit>. Some things to keep in mind. There was a request to highlight terms associated with <bullshit>. I have done so, please see the sections titled <bulshit, bullshit, and bullshit>....

Obviously, one can still worry that I may not have "redacted" enough information and that I'm still revealing sensitive information, but I'm comfortable with my ability to determine what's sensitive and what's not.

If a person uses Windows, Microsoft already has access to any information which was ever typed on this computer. Nobody cares about it, despite the fact that it's known that Windows can literally send keystrokes as telemetry data to its home. Why ChatGPT would be different? You either trust that corporations don't abuse their power or you don't engage in any IT.
If a company uses MS or any other aoftware, they have all.konda of liscense agreements and conyracts with those software providers. If an individual employee decides to use ChatGPT to write a report, the comoany does not have any of those in place with openai. That is a major difference.
Depending on the industry and company this may be illegal and grounds for dismissal.
It would violate basically every confidentiality stipulations in any contract I ad in my career so far. I think there is one were it could even have got me jail, worst case. But then there are people leaking classified technical data about modern tanks on wargaming forums...
I give it really generic asks and it says things like [company name]
Yeah I've seen a lot of people who seem to believe that the prompts they give ChatGPT aren't being cataloged and saved when they certainly are.

It sends every prompt you give it to a server, by design it has to as the model is far too computationally expensive to run locally.

> Yeah I've seen a lot of people who seem to believe that the prompts they give ChatGPT aren't being cataloged and saved when they certainly are.

Are you sure there are a lot of people who believe that? The UI literally saves the prompts on the left side.

Well, there are enough people using it for work. So at the very least, they don't care about potentially leaking confidential information.