Comment by lstodd
4 days ago
Can you state with absolute сertainity that no entity outside your github unit can exfiltrate data at will?
This is not spicy, this is basic infosec.
4 days ago
Can you state with absolute сertainity that no entity outside your github unit can exfiltrate data at will?
This is not spicy, this is basic infosec.
Nobody can say that with absolute certainty, so obviously not.
And since you presumably knew that already (as it is basic infosec) then yes it is spicy, or simply antagonistic.
If we lower the threshold from "absolutely" to "absent third-party breaches" what would you say?
Even with your rephrasing you’re looking for an answer in absolutes which is generally impossible, but unpacking your line of questioning, what it really amounts to is how “in the know” I am or am not.
To the best of my knowledge I know about every ongoing company AI safety and user privacy initiative, and none of them involve permitting access to copilot user content to any second party or third party entity.
Of course, that’s tautological. I don’t know what I don’t know, but I’m senior enough and with broad enough scope that I’m at least read in on what I believe is the majority of high level business initiatives.
I’m not trying to be evasive, this is just the reality of any organization - I only know what I know. Everything within my scope of awareness indicates that there is no copilot user content access outside of our publicly published terms of service.
4 replies →
> If we lower the threshold from "absolutely" to "absent third-party breaches" what would you say?
If anyone answered that question affirmatively, I'd lose a massive amount of trust in them. It would betray they fundamentally misunderstand the stochastic nature of playing defense.
It's a pretty antagonistic way of asking a question man. Don't do that
I do not believe in being non-antagonistic in pursuit of truth. They could have admitted they never had any control over what's uploaded. Instead even when "antagonistically asked a question" they chose to not answer it. This is an answer in itself and to our great sadness extracting that required some amount of "antagonism".