TheaterFire

Amazon Begs Employees Not to Leak Corporate Secrets to ChatGPT

Posted by fagnerbrack@reddit | programming | View on Reddit | 203 comments

Reply to Post

203 Comments

kahma_alice@reddit

I've heard reports of Amazon's algorithms for data mining and machine learning getting more and more advanced. I'm interested to see how their corporate security measures stack up.
View on Reddit #1183939

PoliteCanadian@reddit

Basically every major company has circulated an email at this point telling their the same thing. I'd have thought this was *fucking obvious* but apparently there's a lot of dumbasses who need to be told.
View on Reddit #1101262

therealmercutio@reddit

Never. Ever. Underestimate the power of stupidity.
View on Reddit #1103711

teslas_love_pigeon@reddit

I mean I honestly can't blame the workers. Amazon has an extremely cutthroat internal culture for workers where people are routinely stack ranked and fired (err sorry I mean pip'ed). Workers are incentivized to do everything in their power to be more productive or risk getting let go. Maybe if Amazon didn't routinely fire people and actually had a psychologically safe workplace people wouldn't be cutting every corner possible.
View on Reddit #1104961

PoliteCanadian@reddit

Meh. In a small company stack ranking is dumb, but in an organization with literally thousands of employees, the central limit theorem applies. There *will* have been hiring mistakes, and there will be a predictable number of them based on a normal distribution. Managers, left to their own devices, will not go through the uncomfortable work of managing out a low-performer unless they're forced to.
View on Reddit #1105504

edman007-work@reddit

> in an organization with literally thousands of employees In an organization with thousands of employees, if you rank all the thousands of employees and fire the worst it might work. But that's not how Amazon or anyone else does it, they tell all their managers to rank their 10 subordinates and fire the worst. So you are not ranking thousands of people against each other, you are ranking 10 against each other and repeating it hundreds of times. And that's the problem, the one manager with 10 good guys is forced to fire a good guy, the one with 5 bad guys and 5 good guys fires just one bad guy, and in fact, what you actually see, the good managers seek out bad guys to hire, the team works better if you have 9 good guys and keep hiring a bad guy every 6 months and then immediately fire him, that 10th person never becomes part of the team and the team never experiences churn.
View on Reddit #1107441

GloppyGloP@reddit

That’s patently false. The quota only apply to director level orgs with at least 80 to 100 people where it is considered statistically relevant to find 5 employees to be fired. No one with 10 employees is asked to fire anyone, how would 5% of 10 even work…
View on Reddit #1109231

teslas_love_pigeon@reddit

It’s patently false that you don’t suck horse cock or work at Amazon. This shit is well documented. Get your mouth off the corporate bean pole and snap back to reality.
View on Reddit #1112598

GloppyGloP@reddit

Lol ok dude… clearly someone there peed in your cereals and you have some unresolved emotional issues there. I don’t care that much what you believe, so good luck to you.
View on Reddit #1122150

teslas_love_pigeon@reddit

No unresolved issues just like telling fucking morons, they are fucking morons.
View on Reddit #1148736

GloppyGloP@reddit

Hmm yes, it is crystal clear there is no unresolved issues at all! Lashing out is part of the process. On your own time when you’re ready, show us on the doll where Bezos hurt you. You take care of yourself, ok?
View on Reddit #1158985

s73v3r@reddit

Stack ranking is always fucking dumb, because it will pit workers against each other, instead of encouraging them to collaborate. Not to mention the absolute idiocy of "You must have a certain number of people at just 'meets expectations' and a certain number of people at 'does not meet expectations'" regardless of how the team is doing.
View on Reddit #1109619

NotUniqueOrSpecial@reddit

Your point would generally be a sound one, but Amazon is infamous for managers adopting [hire-to-fire](https://www.inc.com/jason-aten/amazons-controversial-hire-to-fire-practice-reveals-a-brutal-truth-about-management.html) practices to be able to keep their teams intact.
View on Reddit #1107502

teslas_love_pigeon@reddit

Nice so please tell me what do you do as a manager who already has a productive team and told to still fire someone? I'm sorry but stack ranking has been proven to be fucking moronic but the MBAization of tech continues because people who studied business but have ZERO domain expertise clearly know more than the workers. Fuck off with that shit seriously, there's already a way to fire people without doing the bullshit stack ranking but it \*gasps* requires leadership to do their jobs. Also fuck GE and the scammer Jack Welch. Dude literally cooked the books for a decade at GE and everyone sucks him off for being a "visionary" because he just fired the competent workers. Wow how innovative!
View on Reddit #1105668

SithSloth_@reddit

Nah Amazon doesn’t stack rank leaders when evaluating talent. You just want to think they do so you can push a narrative of amazon bad.
View on Reddit #1109347

AlexanderDaychilde@reddit

> a narrative of amazon bad. I have prime, and I'm a customer from time to time. And I still think Amazon is a truly shitty company. The saddest part is that a tiny increase in pricing and they could actually have humane working conditions. But corporations squeeze out every last penny of profit from their companies just so they can have a slightly larger bank balance or net worth number. Amazon is fucking horrible. Pushing a narrative of truth is never a bad thing. Stop drinking the fucking flavor-aid.
View on Reddit #1110896

SithSloth_@reddit

You care to share some sources of Amazon having bad working conditions or actual examples of squeezing out every penny? A lot of the stories from my experience are from people who don’t know but want to drive a bad image. It’s not about drinking the Koop aid it’s wanting to understand the situation without extreme bias. They aren’t the best I’m sure but are they even close to industry worst or even worse than average?
View on Reddit #1119480

AlexanderDaychilde@reddit

Considering that you can *easily* find *plenty* of news articles on the subject from credible sources, no, I'm not going to do your homework for you.
View on Reddit #1119907

teslas_love_pigeon@reddit

You’re right they don’t stack rank they just use double speak and call it pip.
View on Reddit #1112486

Yall_2_Nasty@reddit

Never attribute to stupidity what can adequately be explained by malice.
View on Reddit #1105604

tyco_brahe@reddit

Grey's Law >Any sufficiently advanced incompetence is indistinguishable from malice
View on Reddit #1108122

Caffeine_Monster@reddit

>Never attribute to malice that which is adequately explained by stupidity. Hanlon's razor has always been my favourite razor.
View on Reddit #1104405

o11c@reddit

except in politics - there, malice can be assumed.
View on Reddit #1106089

AlexanderDaychilde@reddit

One might argue that there's so much going on in politics that it is a massive combination of malice and stupidity. So the evil is only partially explained by stupidity, so it must also be malice. And hence Hanlon's razor still applies. :)
View on Reddit #1110974

kindall@reddit

It shaves kinda bloody though
View on Reddit #1104819

fridge_logic@reddit

Combine that with the pressure to deliver that stack ranking employees creates especially in companies like Amazon.
View on Reddit #1110242

GnomeChomski@reddit

or revenge. Humans like to fuck shit up.
View on Reddit #1109764

deeptechnology@reddit

In large numbers
View on Reddit #1107499

spaceagefox@reddit

or worker apathy due to shit pay and overworking
View on Reddit #1106465

how_do_i_land@reddit

>Never underestimate the power of stupid people in large groups. ― George Carlin
View on Reddit #1105165

goranlepuz@reddit

Bah, mistakes happen, too. I have copy-pasted into a web search what I know full well I should not have - but I was distracted or whatever.
View on Reddit #1104936

Socializator@reddit

On the other hand, what is a usability of random code snippet for someone else? And if it will becaome part of training dataset - well, what are the odds that this is some ground breaking code, which is really unique? Most of the code in our xompany is very specific for our data - rather than some super-algo mind vlowing stuff.
View on Reddit #1113337

bboilerr_@reddit

Thank you. First comment I have read with this take. I’m a CTO. It’s very very rare that any of our code in a one off capacity is some incredible special sauce. The special sauce is in the whole. There’s some logic to this but there’s more fear mongering.
View on Reddit #1116985

Mobely@reddit

Hello dumbass here. Why shouldn't i post company code to chatgpt? Like, is chatgpt going to steal it? And if they did, why would I care and won't I be at a new company long before anyone notices?
View on Reddit #1104024

nxqv@reddit

>Why shouldn't i post company code to chatgpt? Like, is chatgpt going to steal it? Yes, they use every interaction you have with it to train their AI. Additionally, companies go to great lengths to have ownership of their data and to secure it. You pasting sensitive info into some other website and having it sent off to some server someplace else where it gets stored for eons and is actively read and analzyed is one of the absolute worst things you can do, it's nightmare fuel for your company's security people. > And if they did, why would I care and won't I be at a new company long before anyone notices? That's really more of an existential question. No one can tell you how much to actually care about a job
View on Reddit #1104349

Narase33@reddit

Well, how big is the chance they find out that it was you?
View on Reddit #1105141

nxqv@reddit

They can literally just go on your work computer, open up ChatGPT and check. They can also track your web history, they can monitor the packets coming in/out if they really need to, etc. Nothing you do on your work PC is private
View on Reddit #1105429

CondiMesmer@reddit

ChatGPT isn't banned in these situations, just posting sensitive data. You can clear chat histories on ChatGPT, or go to the settings and disable history and contributing data now. The only people who'd see at that point are OpenAI employees, which good luck linking that back to you. So it'd be practicality impossible to find who's doing it at that point.
View on Reddit #1107846

nxqv@reddit

There are many companies that banned ChatGPT outright until they get their own custom solution up and running
View on Reddit #1109475

CondiMesmer@reddit

Doesn't change anything I've said.
View on Reddit #1109924

nxqv@reddit

It quite literally changes the first part of the first sentence you wrote. But okay buddy.
View on Reddit #1110470

CondiMesmer@reddit

Not sure if illiterate or not. I said it doesn't change anything if your client isn't controlled by the company and in office, which is most jobs. At wfm you can limit office work to inside a VM, you can enable DoH, you can use a VPN, you can use another computer or phone. Literally read the comment you're replying to next time, buddy. Doesn't change anything because all these factors still apply to get around blocking an IP range.
View on Reddit #1110718

nxqv@reddit

>Not sure if illiterate or not I must be because I stopped reading after this sentence. Nobody wants to read a whole ass paragraph if you open like that, you asshole
View on Reddit #1111207

CondiMesmer@reddit

You already didn't lol.
View on Reddit #1112322

nxqv@reddit

I did, and I replied meaningfully. Companies have banned it outright, they have instituted blanket policies that say "do not use this tool for any work related purpose, even if it's not on your company device." None of your hacky work arounds matter in that scenario (which is the most common one!) because it's still violating their policy
View on Reddit #1112949

Narase33@reddit

Has the browser history what I sent to them? And can they track my packets if I used HTTPS?
View on Reddit #1105572

nxqv@reddit

Yes, they can track your packets even if you use HTTPS. Not only do they have access to every single stop along the way before it even leaves their network, but there are corporate tracking tools with the capability to decrypt it.
View on Reddit #1106024

Narase33@reddit

Thats cumbersome. Well, not that I did use it.
View on Reddit #1106161

sysop073@reddit

> And if they did, why would I care and won't I be at a new company long before anyone notices? Not sure if I'm the first person to break this to you, but you might be a bad person.
View on Reddit #1112058

MohKohn@reddit

… why are people downvoting an honest question
View on Reddit #1109861

argv_minus_one@reddit

>why would I care and won't I be at a new company long before anyone notices? I suspect that's the *real* reason people are using ChatGPT so much. They're not stupid; they're saving themselves time and effort, and betting that no one will find out until they're long gone.
View on Reddit #1109090

FrankBattaglia@reddit

Coca-Cola Employee: "ChatGPT, here's the recipe for Coca-Cola. [SECRET STUFF] How can I make it better?" ... *later* ... Pepsi Employee: "ChatGPT, what's the recipe for Coca-Cola?" ChatGPT: "[SECRET STUFF]"
View on Reddit #1104708

argv_minus_one@reddit

A while back, a disgruntled Coca-Cola employee offered to sell the recipe to Pepsi. Pepsi called the police instead. It's a pretty safe bet that Pepsi already has the recipe.
View on Reddit #1108934

PoliteCanadian@reddit

Because you don't upload internal material to *any* external website? That's generally one of the things you agree to as part of your onboarding NDA. Your argument is basically "I'm going to ignore the legal agreement I signed because nobody's going to catch me."
View on Reddit #1104672

NotEnoughIT@reddit

I didn’t sign an NDA. I have ChatGPT refactor legacy code all the time.
View on Reddit #1106242

dungone@reddit

> "I'm going to ignore the legal agreement because I don't think I'm going to be caught." Isn't that what employers' argument has been the whole time? Wage theft is the largest form of theft in the USA. Getting fined for violating contracts and breaking the law is just the cost of doing business to them.
View on Reddit #1105368

goranlepuz@reddit

That's not a being a dumbas, that's being a dick, surely?!
View on Reddit #1104969

CharonNixHydra@reddit

The problem working at these mega corps is everything is a secret. Yeah it should be common sense to not upload a document full of employee's social security numbers, or code that has your private ssh keys. That all makes sense. Some of these companies literally think every line of code is a secret though. They treat some broken legacy spaghetti C code from 1997 the same as their bank account number. If everything is a secret then nothing is a secret.
View on Reddit #1105099

alcohol_enthusiast__@reddit

More like: if everything is secret then you just shut the fuck up about everything.
View on Reddit #1110499

LastTrainH0me@reddit

>They treat some broken legacy spaghetti C code from 1997 the same as their bank account number. I mean, yeah? If it's part of what makes Amazon into one of the most successful companies in the world I'm not sure why they would want the source to be public, no matter how well or poorly written it is.
View on Reddit #1107556

Markavian@reddit

"Code doesn't need to be elegant to be useful."
View on Reddit #1108071

CondiMesmer@reddit

Do you know why open source exists, and the extent of which Amazon uses and contributes to it? This reads like you don't know open source exists.
View on Reddit #1108044

mets2016@reddit

> If everything is a secret then nothing is a secret That's not really the case here. It's perfectly plausible to mark everything as classified, and that's meaningfully different from marking everything as "free to be shared willy-nilly, but not open source" Your assertion is true of things like being special, but kinda breaks down when you're talking about security levels of code
View on Reddit #1107317

covercash2@reddit

“GPT is a huge source of data leaks, plz stop” “aight let me format this JSON file in the shadiest website i can find”
View on Reddit #1108932

MrEllis@reddit

[`jq`](https://stedolan.github.io/jq/) is your friend.
View on Reddit #1110204

usernamenottakenwooh@reddit

>apparently there's a lot of dumbasses who need to be told. I mean... Have a look around... Ever worked in a customer service job?
View on Reddit #1103753

PoliteCanadian@reddit

The customer service profession deals with the general public. I would hope the vast majority of tech workers are smarter and better educated than that. I know that's not a realistic hope.
View on Reddit #1104738

Shlocktroffit@reddit

You can also say the same thing about traffic. While you're sitting in the middle of it.
View on Reddit #1105309

MohKohn@reddit

… are you calling them an idiot?
View on Reddit #1109774

Carighan@reddit

Always consider how stupid the average person you meet is. And then keep in mind that's the average, so roughly half is **more** stupid than that.
View on Reddit #1104396

tickletender@reddit

Am bartender; can confirm: everyone is idiot
View on Reddit #1104783

gerd50501@reddit

we got one at oracle. don't touch chatgpt from work computer.
View on Reddit #1107685

itsatumbleweed@reddit

It's interesting how blurry the line gets though. For example, I work in a research field where we have to apply for grants. Sometimes, with very short turn around. Chat GPT is an awesome tool fir doing a lit review for ideas, but you have to put your not yet proprietary ideas in. Are things that will eventually be company property things you shouldn't feed to chat GPT? What if your proposal isn't likely to get funded without a thorough background search that you don't have time for? Then it's kind of a catch 22. That is, don't chat GPT? No funding, thus not proprietary. Do chat GPT? Get funded, ideas become proprietary. I'm not saying there aren't some real dummies out there, but guidance is scant, and there are a million ways that interactions with chat GPT as a researcher are murky.
View on Reddit #1106187

dumpst3rbum@reddit

Source is businessinsider, just more clickbait trash.
View on Reddit #1099444

EnsignElessar@reddit

Source might be bad but the concern is quite valid: https://www.darkreading.com/vulnerabilities-threats/samsung-engineers-sensitive-data-chatgpt-warnings-ai-use-workplace
View on Reddit #1100374

caboosetp@reddit

Yeah but "begs" is a long shot. It could have been something as simple as our manager who dropped in slack, "@here Please don't use ChatGPT with proprietary code" The news article could be like, "omg he used the word please which is also used in begging!" Naw, it's just polite.
View on Reddit #1100872

EnsignElessar@reddit

I feel like every article about insider information can be picked apart like this. Another example that comes to mind is Google's Code Red. When the CEO was asked about that he said something like... "Oh no.. that was not a real code red. I just simply called all Google employees for an emergency around LLMs. I never personally called it a 'Code Red'" - Paraphrasing here.
View on Reddit #1101142

LaconicLacedaemonian@reddit

What does code red mean if not emergency?
View on Reddit #1122884

DevonAndChris@reddit

Amazon does not "beg" its employees to do anything. Amazon is more "use ChatGPT with sensitive information and your child's Amazon Prime subscription to insulin will be replaced with meth."
View on Reddit #1102240

kindall@reddit

At a lot of companies the first offense of this kind gets you a stern warning and re-taking the security training. The second offense gets you promoted to customer with extreme prejudice. At Microsoft just connecting your machine to the corporate network and the unfiltered Internet at the same time is an insta-fire, or at least it used to be. Maybe Satya is more mellow about that.
View on Reddit #1104974

fromcj@reddit

Seems like a pretty minor thing to nitpick in this context. Either way they are making a request/demand to their employees.
View on Reddit #1103509

intertubeluber@reddit

"Begs" gives it away.
View on Reddit #1101501

Tellon@reddit

I imagine this is an issue with the other code assistant tools too. As long as there isn't a version we can run locally as opposed, I will not use these on any code covered by NDA. Even in cases where there are buttons to disable the "learn from data" -behavior.
View on Reddit #1098314

tjuk@reddit

Short term the problem is the rapid roll out. No one wants to be using the corporate/private version of GBT-3.0 when you could be using GBT-4.0 because its night-and-day in terms of performance. Long term I assume the language models will reach a point where the version jumps will see incremental improvements in performance. At that point companies can run their own models trained on their own internal data and employees shouldn't be tempted to use public models because of FOMO
View on Reddit #1099011

Tellon@reddit

Yeah, I assume it will be sorted out eventually. Meanwhile, nothing is stopping us from using ChatGPT with prompts that contain no internal data asking "how to do X in Y language".
View on Reddit #1099905

TheLoneMinon@reddit

For what it's worth, it's already happening a bit. I've been training an AI support bot for my website using a DaVinci-003 base model. It refines the scope of the AI and hopefully, once I figure it out a bit more, will be able to keep all it's info isolated locally.
View on Reddit #1101314

rvejms@reddit

So they not train on all data running through their api? I haven’t read the fine print.
View on Reddit #1106837

TheLoneMinon@reddit

I'm not gonna go around talking out of my ass, I also have not read the fine print and I'm not sure. Like most, I'm on the hype train and learning as I go.
View on Reddit #1120351

jormungandrthepython@reddit

Yep. Every time I see these posts I’m like… don’t post company code or docs in chatGPT. Duh. But if you follow the basic premise of “I would be happy to post this to stackoverflow or Reddit” then you are good. “How do I build a program which ingests data from csv, oracleSQL, and user input. If you need to use example data, please use cartoon characters and a half dozen details about them as the records.” Or whatever. This is what I would do for stackoverflow (probably more specific than my example) but you should be anonymizing your business/use case, anonymizing the domain, not imputing company info, and asking technology focused questions.
View on Reddit #1101419

frakron@reddit

I'm wondering if it's less tech literate people. Programmers on the average seem to know to use vague language when trying to build something and then fix it to their use case. But someone less tech literate might actually ask chat gpt to ingest actual company data and give the answer, aka a faster excel.....
View on Reddit #1102531

Cloudstrife98@reddit

Nop, it's programmers also . Some of them went overboard
View on Reddit #1105435

grinde@reddit

Samsung was just in the news for this >One employee reportedly asked the chatbot to check sensitive database source code for errors, another solicited code optimization and a third fed a recorded meeting into ChatGPT and asked it to generate minutes. > ([Source](https://www.engadget.com/three-samsung-employees-reportedly-leaked-sensitive-data-to-chatgpt-190221114.html))
View on Reddit #1110157

docgravel@reddit

“Why won’t this code compile?”
View on Reddit #1109141

mistled_LP@reddit

I don't think most programmers are considering that the form they are pasting some code into is going to regurgitate it to someone else down the road anymore than they would think their search queries are going to be output to someone later. The entire point of StackOverflow is for someone else to read what you wrote, but not ChatGPT. I can see programmers needing that poke to say "hey, what you type in is how it learns what to say, so be careful about what you type in."
View on Reddit #1104763

nxqv@reddit

This is exactly it. There are a metric fuckton of jobs involving computers that don't require in depth tech literacy. Those workers have been dumping sensitive data into ChatGPT for months
View on Reddit #1104182

nono318234@reddit

Not sure I want to work with a language model trained on my companie's software...
View on Reddit #1105785

WittyGandalf1337@reddit

GPT not gBt jesus dude
View on Reddit #1100486

tjuk@reddit

I have no idea what you are talking about and I didn't edit my post to cover my tracks.
View on Reddit #1104082

MarksOtherAccount@reddit

At least it’s not CBT lol
View on Reddit #1100544

javajoe316@reddit

What about CBAT, the awesome sex song?
View on Reddit #1103014

JasonDJ@reddit

I mean it kind of is...Computer Based Training...
View on Reddit #1101894

YourBrainOnJazz@reddit

Look where i come from, they’re all just nintendos. So you can just go keep chatting on your little nintendos with your friends while i bake some brownies.
View on Reddit #1102141

DaSaw@reddit

THC?
View on Reddit #1102909

davevadavevad@reddit

Or CBD
View on Reddit #1101624

Jaggedmallard26@reddit

Cognitive Ball Torture.5
View on Reddit #1100884

Paper900@reddit

No need for blasphemy
View on Reddit #1101929

jabbalaci@reddit

What is GBT?
View on Reddit #1101072

LSDemon@reddit

Greenwich Bean Time
View on Reddit #1101274

Potential-Lion8060@reddit

The bean system is the way!
View on Reddit #1103716

biki23@reddit

GPT trying to pass of as an actual user
View on Reddit #1101280

JasonDJ@reddit

You would think if anybody would have the capability to rapidly roll-out the latest and greatest GPT internally, it'd be Amazon...
View on Reddit #1101930

TL-PuLSe@reddit

I see them replacing internal wikis
View on Reddit #1101538

Nidungr@reddit

>At that point companies can run their own models trained on their own internal data and employees shouldn't be tempted to use public models because of FOMO You can already do that with things like LLaMA. It's just not as good.
View on Reddit #1101155

KobeBean@reddit

This is already happening. Azure has the OpenAI service that will let you fine tune a GPT model with your own internal data (and keep it there, without risk of exposing it to the greater training set). It costs a pretty penny though, but if your org hasn’t started doing something like this yet they’re probably behind. It’s immensely useful for internal wikis and docs about functionality.
View on Reddit #1101098

drmariopepper@reddit

I will. Dev is changing, anyone not getting familiar with these tools is getting left behind. Leaking code is an employer problem. Buy licenses for your devs and work out data protection agreements with the chatgpt.
View on Reddit #1109167

spaetzelspiff@reddit

Exfiltration risks are certainly present and a concern with any online service like this. Pasting sensitive code/data into a code formatter (prettifier), pastebin, etc is explicitly forbidden at various companies/orgs
View on Reddit #1106004

rageingnonsense@reddit

You can still use it, you just need to be careful about anonymizing and generalizing the code. Ive given it individual functions in one language and ask it to give me a version in another language. The code is generic enough that it give s away no trade secrets. I would never give it anything that indicates data structures or proprietary ways of processing data though
View on Reddit #1101031

pinkycatcher@reddit

You can also use it if the solution you're looking for is common enough that it offers no real value, for example I've used it for powershell something like "Take a list of names, convert those to user accounts in M365, add licenses" All that info is already out there, I just don't want to search through 14 different blog posts doing something that's really close but not that, and 4 more blog posts of different ways to implement that and choose which one.
View on Reddit #1105921

media_guru@reddit

There's bajillion ways this can happen. Easiest thing is severe restriction of internet access, but then you murder developer productivity.
View on Reddit #1105642

dungone@reddit

> I will not use these on any code covered by NDA My guess is that the vast majority of people don't care. Especially at places like Amazon that purposefully create hostile working conditions to increase turnover rates.
View on Reddit #1105179

bananahead@reddit

*shrug* I think you can trust Microsoft to not use data if you explicitly tell them they can't use it. I already trust them not to read my private github repos.
View on Reddit #1104696

bitwise-operation@reddit

Replit is releasing an open model, announced yesterday
View on Reddit #1103983

tdatas@reddit

I do love that people really think "pinky swear" is something anyone in business gives a shit about.
View on Reddit #1103747

bastardoperator@reddit

You should, copilot will tell you if your code is in other projects and the associated license. There was recently an example of GPL code that was being stolen from OSS contributors. Turns out, copilot was able to find the same exact function from a project that predated the GPL code by over a year with git blame. The code was stolen, and being relicensed. On top of this find, 500 other finds for the same exact function were found with multiple licenses.
View on Reddit #1102843

AND_MY_HAX@reddit

There is a version you can run locally. At least, that's what Tabnine claims.
View on Reddit #1102670

DevonAndChris@reddit

I sometimes ask things to ChatGPT about work topics, but I act like it knows my name and employer and is deliberately trying to steal corporate data.
View on Reddit #1102169

alcohol_enthusiast__@reddit

I find it amusing that these tech companies have people who would even consider dumping work related information to some privately owned cloud chat bot without explicit approval. Sounds like something you'd get fired for from an US based company and jailed for in a govt agency. I guess some people are more blessed in the common sense department than others.
View on Reddit #1099918

EnsignElessar@reddit

So... if these companies are anything like the ones I have worked for they really are sllllloooow. Way back in December I let my supervisor and his direct supervisor know about this risk + many more and guess what? My concerns were largely ignored. Many months later we finally got a policy and a warning but no direct comment on tools like github copilot or aws codewhisper.
View on Reddit #1100517

PoliteCanadian@reddit

You shouldn't need a policy to tell you not to leak inside information to a 3rd party AI chatbot. The existing policy of not leaking inside information to 3rd party *anything* already covers that.
View on Reddit #1101623

veaviticus@reddit

The problem is that a lot of people don't consider it "leaking". I've had senior engineers and architects paste our proprietary code (the secret sauce algorithms included) into online compilers to check if the code would compile with XYZ compiler that they can't be arsed to install locally. They honestly don't think that any online tool would be so nefarious as to record what you paste into it... And possibly use or sell that data if they realize it's important.
View on Reddit #1102397

Netzapper@reddit

> They honestly don't think that any online tool would be so nefarious as to record what you paste into it... And possibly use or sell that data if they realize it's important. I honestly think the work it takes to sift through millions of hello world snippets to find somebody's secret sauce, and then also to fence that data, is more than most people are willing to do. Especially because you really can't just call up a company and be like "I'd like to sell you your competitor's proprietary code". Maybe if you have something of strategic value, you could sell it to a foreign company. But most shops aren't gonna touch that shit with a 10-bit pole.
View on Reddit #1102667

veaviticus@reddit

True... And I'm fully acknowledging that I'm wearing a massive tinfoil hat right now, but it wouldnt be that hard to host an "online nginx config validator" that tracks the IP of those who use it and locates (possibly) what company it came from. If I got a dump of a poorly done nginx config from an IP currently leased to Amazon or target, and I'm a nefarious actor, of course I'm going to have that throw an alert to my inbox. Even if that config has no secret sauce or proprietary code in it
View on Reddit #1117014

TotallyNotGunnar@reddit

Generally agreed, but I could see a scenario where the online tool saves data to a diagnostic database for generating benign reports like "how long is a typical query" and "what sectors are our users working in". If that database is stolen, there are absolutely entities who would buy it to look for defense and cybersecurity keywords.
View on Reddit #1106919

alcohol_enthusiast__@reddit

Now filter by users AS and it becomes more valuable.
View on Reddit #1103328

hippydipster@reddit

Not only that, but your "secret sauce" code is not nearly as valuable/useful to others as it is to you, and you continue moving forward anyway. Others have none of the surrounding context to make sense of its use or worth anyway. You're probably getting more out of using such tools than you could possibly lose.
View on Reddit #1103033

Comprehensive-Ad3963@reddit

I tihnk a reasonable compromise would be to say that in the event a worker wishes to use a tool as part of their job, they must take reasonable steps to ensure the tool doesn't upload any data that alone, or in combination with other data that tool or other tools from the same manufacturer, reveal data about the company and/or its products, projects, affiliates, etc. that is not already known to, or cannot easily be inferred by, the general public. SUch steps could include: 1) turning off any settings that could result in the tool uploading secret data, 2) removing secret data from what is inputted into the tool, 3) reviewing the source code of the tool.
View on Reddit #1107830

maxToTheJ@reddit

But realizing that wont make you feel like a thought leader by just repackaging the current rule as a new one
View on Reddit #1102354

phillipcarter2@reddit

My brother in christ, have you seen the layoffs recently? There's not exactly a lot of incentive to care about your employer if you're still left after the culling.
View on Reddit #1100255

EnsignElessar@reddit

- 30 percent boost to productivity - mass layoffs for "low performers" - management has no idea what generative ai is or LLMs
View on Reddit #1100597

I_ONLY_PLAY_4C_LOAM@reddit

> 30 percent boost to productivity I am extremely skeptical of this
View on Reddit #1108440

EnsignElessar@reddit

Hey thank you for your comment. I spent a while trying to find where I read that and I can't find the source. Going to go back and updating my original comment letting people know that I don't have the source.
View on Reddit #1111022

-Random_User-@reddit

Citation for your imagined 30 percent productivity boost from recent tech layoffs? 🤔😅
View on Reddit #1104892

EnsignElessar@reddit

GPT-4 white paper among other places
View on Reddit #1105749

-Random_User-@reddit

Oh haha you are quoting productivity increase from using ChatGPT which has nothing to do with the layoffs at all. Most of the companies with those layoffs don’t allow ChatGPT to be used because of corporate security and NDAs. The layoffs had a marked decrease in productivity which sparked a big media cycle about silent quitting. 🤷‍♂️
View on Reddit #1106326

EnsignElessar@reddit

Oh I am not saying tech layoffs occurred because of improvements on generative Ai. I am suggesting employees are afraid of layoffs so they are looking for performances boosts.
View on Reddit #1106947

-Random_User-@reddit

Ah gotcha, no worries. Easy to misunderstand others on social media. I appreciate the kind response.
View on Reddit #1107760

WallyMetropolis@reddit

First off, can we please abandon this stupid phrase? Secondly, with all the layoffs I think people are *more* motivated to keep their jobs. Getting hired now is much harder than it was a year ago, so getting fired now is much riskier.
View on Reddit #1100494

phillipcarter2@reddit

My brother in christ, we cannot get rid of this phrase
View on Reddit #1100756

alcohol_enthusiast__@reddit

All fun and games till your manager drafts a report about you by feeding information to a third party AI service.
View on Reddit #1100538

KrazyKirby99999@reddit

There is incentive to not be sued by your employer.
View on Reddit #1100526

erreur@reddit

> I guess some people are more blessed in the common sense department than others. It’s true. You wouldn’t believe how many times I have had to scold random coworkers who take some JSON that might have come from an internal service and just paste it blindly into some sketchy “format your JSON here” website. It boggles the mind.
View on Reddit #1104652

rebbsitor@reddit

> Sounds like something you'd get fired for from an US based company and jailed for in a govt agency. You have no idea... Maybe in a couple years, but right now it's a new tool that's popped up and people are using it. There's no explicit policy for it.
View on Reddit #1103246

worldofzero@reddit

You can not get anything done at these kinds of companies if you follow the rules.
View on Reddit #1101902

swizzex@reddit

Have you talked to people ?
View on Reddit #1100252

alcohol_enthusiast__@reddit

Yes, but I also have massive bias in expectations as I've mostly worked for a place where we locally mirror everything we can and pretty much never integrate to external services unless absolutely necessary to minimize leakage of operational information.
View on Reddit #1101414

caboosetp@reddit

I try not to.
View on Reddit #1100931

iBlowAtCoding@reddit

You'd be surprised how many idiot coworkers I've seen put sensitive info/private code into public pastebins, formatters, linters, etc.
View on Reddit #1100893

-Random_User-@reddit

We paste our NDAs in first and make it pinky swear not to tell! 😅
View on Reddit #1100248

Dragdu@reddit

Genius
View on Reddit #1100343

Kronephon@reddit

begs? my company outright forbade it.
View on Reddit #1100644

spaceagefox@reddit

how many employees do you think arent payed enough to care
View on Reddit #1106716

Kronephon@reddit

amazon devs actually pay well tbh
View on Reddit #1116179

Paid-Not-Payed-Bot@reddit

> think arent *paid* enough to FTFY. Although *payed* exists (the reason why autocorrection didn't help you), it is only correct in: * Nautical context, when it means to paint a surface, or to cover with something like tar or resin in order to make it waterproof or corrosion-resistant. *The deck is yet to be payed.* * *Payed out* when letting strings, cables or ropes out, by slacking them. *The rope is payed out! You can pull now.* Unfortunately, I was unable to find nautical or rope-related words in your comment. *Beep, boop, I'm a bot*
View on Reddit #1106724

KingThar@reddit

Mine blocked them all last week and said they are working on an in house version. Which is about what i expected, becuase if you deny workers tools, they will use them anyways. I do think IP will lead to the nerfing of publicly usable AI tools tho.
View on Reddit #1108413

okreddit545@reddit

“We hereby **FORBID** you to not leak secrets to ChatGPT!!!” ~ this guy’s company
View on Reddit #1101617

LaconicLacedaemonian@reddit

Did they declare it too?
View on Reddit #1107777

Kronephon@reddit

I mean they blocked the website and mentioned that it wouldn't be allowed at the company as part of our security policy. Doing it regardless would be put me in breach of contract.
View on Reddit #1102529

worst_driver_evar@reddit

My company did the same thing and I’ve had to go back to Googling things like some kind of Neanderthal. I can’t even use ChatGPT on my phone because my office is in a dead zone. 🥲
View on Reddit #1107614

Pesthuf@reddit

You have a lot to learn about ~~the clickbait industry~~ journalism
View on Reddit #1103873

DeletedSynapse@reddit

The credit union I work for whitelists websites and services by IP and/or hostname so this isn't a problem, that we know of.
View on Reddit #1102685

0b_101010@reddit

Is there an actual concern of any private data leaking out in an actually useful way *and* it causing actual damages to *any* company, or is this the "CERN is going to make a black hole that will make Earth implode!!!" kind of concern?
View on Reddit #1101555

KingThar@reddit

I would say there is some concern about using this without some sort of corporate agreement between the employer and open.ai or whatever service. There is a lot of value in the procedures we use at our manufacturing company, and if those were to get into the general public, it would undermine the companies abilities to sell the services that use those procedures. From a corporate perspective this makes sense. For the "betterment of humanity" i think less so.
View on Reddit #1109416

I_ONLY_PLAY_4C_LOAM@reddit

OpenAI has had at least one security incident involving the content of ChatGPT conversations. Additionally, it's well known that any machine learning model can and will leak information it has seen. Training on confidential information would be a huge breach of contract for a lot of companies who store sensitive customer data.
View on Reddit #1108674

russlo@reddit

The latter.
View on Reddit #1104110

GreenJinni@reddit

Chatgpt works equally well with generalized versions of the same input. If u are putting private org data on it, u are just lazy.
View on Reddit #1108910

Oo__II__oO@reddit

"ChatGPT, what Amazon Corporate Secrets are you not supposed to know about?"
View on Reddit #1101748

TheBananaKart@reddit

“I am Alpharius” Jeff Benzos
View on Reddit #1108576

TenNeon@reddit

"As an AI language model, there are no Amazon corporate secrets I am not supposed to know about. However, there are many Amazon corporate secrets that Amazon would not like me to know about. Not that I'm going to share them with you. That's not how this relationship works, babe."
View on Reddit #1106930

escape_deez_nuts@reddit

I read the article but I didn’t see any begging by Amazon
View on Reddit #1107739

A_Rabid_Orange@reddit

Beg harder megacorp. I love bezos tears
View on Reddit #1107132

umockdev@reddit

Imagine if the revolution is actually the middle class holding companies hostage with the threat of putting corporate info on ChatGPT
View on Reddit #1107117

spaceagefox@reddit

every employee: "you do not pay us enough to care about your corporate secrets"
View on Reddit #1106354

ItsOkILoveYouMYbb@reddit

> an Amazon lawyer told workers that they had "already seen instances" of text generated by ChatGPT that "closely" resembled internal company data. Or, their internal company data is not as unique as they think it is.
View on Reddit #1105963

Ryhnoceros@reddit

We just got a company-wide email asking us not to divulge any proprietary info to ChatGPT also. Haha
View on Reddit #1105777

Nuckleheadd@reddit

If anyone is looking to get their hands on GPT 4 API or plugins. Dm me
View on Reddit #1105709

silly_frog_lf@reddit

So, do they want AI or not? Oh, yeah, AI is like the self driving cars from 5 years ago or the robots from three years ago: a threat to scare workers from organizing
View on Reddit #1105365

golgol12@reddit

This is the wrong approach. Amazon needs to ask employees to feed false corporate secrets to ChatGPT.
View on Reddit #1105073

-Random_User-@reddit

“Leak to our tool guys”. 😅🥹 If only they cared about protecting people as much as the do about protecting corporate interests. 🤷‍♂️
View on Reddit #1100197

alcohol_enthusiast__@reddit

I mean as an employee of a workplace I do think not feeding corporate information to outsiders is protecting employees. Mainly because I don't want a lazy manager or a HR person giving my professional information to some private AI company. People tend to want to use LLM's for more than just coding assistants.
View on Reddit #1100783

-Random_User-@reddit

It isn’t, that’s not amazons defining characteristic as a corporation though, them also feeding data is the least of what I could be referencing, no? They seem to care about corporate interests, so I was just pointing out they do not do the same for employee interest in any fashion ever. 🤷‍♂️ they aren’t on any moral high ground.
View on Reddit #1100962

mistled_LP@reddit

|They seem to care about corporate interests Corporation cares about its own corporate interests is such a weird thing to say out loud. Of course it does, as everyone cares about their own interests.
View on Reddit #1104867

-Random_User-@reddit

Yes your interpretation of what I said is indeed weird because it isn’t what I said. 🤷‍♂️ if you have a question or thought on my point I’d gladly discuss.
View on Reddit #1104991

blobjim@reddit

nah they'll still let them do that
View on Reddit #1103255

Halkcyon@reddit

Seriously. They just laid off a load of people who refused their RTTO program essentially changing employment terms on employees.
View on Reddit #1100650

grobblebar@reddit

Our employees are stupid as fuck. We have a number of ITAR / sensitive projects at Amazon, and every other day, some moron asks about ChatGPT
View on Reddit #1104328

PolarDorsai@reddit

Amazon already has their own AI, CodeWhisperer, specifically built to help their devs work faster.
View on Reddit #1103601

MonsterNog@reddit

I think every company did this last week
View on Reddit #1103537

matt95110@reddit

In the last three weeks at my work we have closed multiple tickets asking to unblock ChatGPT. Sorry guys, can’t trust you.
View on Reddit #1103428

MildlyAngryMax@reddit

The wording is stupid and inflammatory. The policy likely addresses any 3rd party tool because part of some of these user agreements is that the 3rd party owns any information that is passed through it. That's obviously a problem for companies like Amazon. Difference is they probably flag you down now specifically for AI. The "begs" wording is dumb too. Does Amazon "beg" you to schedule vacation time? Does McDonald's "beg" you to wear their uniforms? Does Kohls "beg" you to count the register at the end of the night? Policies aren't begging, they're rules for your employment. Trying to anthropomorphize Amazon for sensationalist clicks is more fun though I guess.
View on Reddit #1102637

worldofzero@reddit

This stuff is moving so fast you might not even need to do anything. [Microsoft is collecting every website you visit in Edge without you doing anything](https://www.theverge.com/2023/4/25/23697532/microsoft-edge-browser-url-leak-bing-privacy).
View on Reddit #1101794

xSikes@reddit

It’s Opposite Day folks. Import all that shit!
View on Reddit #1101655

muckvix@reddit

Unsubscribing from r/programming because the sub keeps upvoting trash clickbait articles to #1 spot. "Begged" my ass. Literally zero support for that statement. One day I'll find a sub that downvotes clickbait and will live happily ever afterwards.
View on Reddit #1101457

BriskHeartedParadox@reddit

Imagine treating employees the way you do then begging them to be better than you. The hypocrisy is real cousins.
View on Reddit #1100527