Hacker News new | ask | show | jobs
by butvacuum 202 days ago
I'm not sure how you can call chatgpt "ostensibly my own computer" when it's primarily a website.

And honestly, E2EE's strict definition (messages between user 1 and user 2 cannot be decrypted by message platform)... Is unambiguously possible for chatGPT. It's just utterly pointless when user2 happens to also be the message platform.

If you message support for $chat_platform (if there is such a thing) do you expect them to be unable to read the messages?

It's still a disingenuous use of the term. And, if TFA is anything like multiple other providers, it's going to be "oh, the video is E2EE. But the 5fps ,non-sensitive' 512*512px preview isn't."
2 comments
therealpygon 202 days ago
> it's primarily a website … unambiguously possible[sic] for chatGPT … happens to also be the message platform

I assume you mean impossible, and in either case that’s not quite accurate. The “end” is a specific AI model you wished to communicate with, not the platform. You’re suggesting they are one and the same, but they are not and Google proves that with their own secure LLM offering.

But I’m 100% with you on it being a disingenuous use.

link
butvacuum 202 days ago
No, No typo- the problem with ChatGPT is the third party that would would be Attesting that's how it works, is just the 2nd party.

I'm not familiar with the referenced Google secure LLM, but offhand- if it's TEE based- Google would be publishing auditable/signed images and Intel/AMD would be the third party Attesting that's whats actually running. TEEs are way out of my expertise though, and there's a ton of places and ways for it to break down.

link
swiftcoder 202 days ago
> And honestly, E2EE's strict definition (messages between user 1 and user 2 cannot be decrypted by message platform)... Is unambiguously possible for chatGPT. It's just utterly pointless when user2 happens to also be the message platform.

This is basically the whole thrust of Apple's Private Cloud Compute architecture. It is possible to build a system that prevents user2 from reading the chats, but it's not clear that most companies want to work within those restrictions.

> If you message support for $chat_platform (if there is such a thing) do you expect them to be unable to read the messages?

If they marketed it as end-to-end encrypted? 100%, unambiguously, yes. And certainly not without I, as the user, granting them access permissions to do so.

link
butvacuum 202 days ago
Not all messages. The message you sent to support- the answer is implicitly "of course they can read them."
link