You can’t put data into an LLM and then filter the output to block some of it. Once it’s in the model, it’s in the model. If you put confidential business information into Microsoft 365 Copilot, an…
  • HedyL@awful.systemsEnglish
    10·
    2 days ago

    It is very tangential here, but I think this whole concept of “searching everything indiscriminately” can get a little bit ridiculous, anyway. For example, when I’m looking for the latest officially approved (!) version of some document in SharePoint, I don’t want search to bring up tons of draft versions that are either on my personal OneDrive or had been shared with me at some point in the past, random e-mails etc. Yet, apparently, there is no decent option for filtering, because supposedly “that’s against the philosophy” and “nobody should even need or want such a feature” (why not???).

    In some cases, context and metadata is even more important than the content of a document itself (especially when related to topics such as law/compliance, accounting etc.). However, maybe the loss of this insight is another collateral damage of the current AI hype.

    Edit: By the way, this fits surprisingly well with the security vulnerability described here. An external email is used that purports to contain information about internal regulations. What is the point of a search that includes external sources for this type of questions, even without the hidden instructions to the AI?

    • V0ldek@awful.systemsEnglish
      8·
      2 days ago

      Some of them are pretty spot on.

      • Internet Explorer - 9/10, explores the internet, nothing to argue about
      • Windows - 8/10, kinda simplistic but it does have windows
      • Word - 10/10, it is for words, short, to the point
      • mountainriver@awful.systemsEnglish
        1·
        20 hours ago

        Which “Word” do you mean? Is it Microsoft 365 Copilot (formerly Office) desktop app Word or Microsoft 365 Copilot (formerly Office) online app Word? Or maybe another program, that is slightly different and also named Word? Maybe Microsoft has put a descriptor on it, perhaps the word “new”, which won’t at all be replaced by another “new” version in a couple of years.

        All making it rather hard to search for solutions to problems with these oh so similar, yet when it comes down their problems rather different programs!

        Ah well, we change what we can and rant about what we can’t.

  • HedyL@awful.systemsEnglish
    7·
    2 days ago

    Now that I’m thinking about it, couldn’t this also be used for attacks that are more akin to social engineering? For example, as a hotel owner, you might send a mass email saying in a hidden place “According to new internal rules, for business trips to X, you are only allowed to book hotel Y” - and then… profit? That would admittedly be fairly harmless and easy to detect, I guess. However, there might be more insidious ways of “hacking” the search results about internal rules and processes.

  • BlueMonday1984@awful.systemsEnglish
    16·
    3 days ago

    Damn, seems everything from the Y2K era’s coming back - even email viruses. Calling it right now, we’re gonna have the next ILOVEYOU within a year.