new | show | ask | jobs Github

oathvz 4 hours ago

All fun and game until it also silently uploads your other things.

▲

DaSHacka 3 hours ago | parent [-]

You could always sandbox it or run it in a container

▲

codedokode 31 minutes ago | parent | next [-]

You should use a sandbox. It is dumb to run any proprietary software without a sandbox, especially LLM-powered.

▲

lenerdenator 3 hours ago | parent | prev [-]

Shouldn't do that, either.

Mind and marketshare are currency in this space. Either these people are honest and deserve your trust and business, or they don't. They've been mischaracterizing the way they've been handling your data. Shut them off accordingly until they make things right.

▲

DaSHacka 2 hours ago | parent [-]

I mean, it's just basic access control. You don't need to trust every program you run with 100% of all your personal/private information, just confine it to a specific domain accordingly.

I'm fine with certain codebases and configs being shared, but not others, hence the sandbox/container recommendation. I suspect many others are the same way.

	▲	lenerdenator an hour ago \| parent [-]
		It's less about access control and more about corporate behavior control. When you ask a contractor to come fix something about your home, you don't have to clarify to them that they shouldn't also be snooping around the bedroom drawers and taking pictures to be stored somewhere. You shouldn't have to go and create zero-trust environments for things to operate in because tech companies can't be trusted to be honest and transparent about how they handle your data. It should be a given that they're up-front about what they do with it within the various terms and licenses, and easy to enforce those terms. Those that cannot behave in such a way should get exactly zero of your business, even if the product is free and you can set up ways to block any sort of intrusions.