This part applies to all customers:

v. Use of Your Content. As part of providing the AI services, Microsoft will process and store your inputs to the service as well as output from the service, for purposes of monitoring for and preventing abusive or harmful uses or outputs of the service.

And while Microsoft has many variations of licensing terms for different jurisdictions and market segments, what they generally promise to opted-out enterprise customers is that they won’t use their inputs to train “public foundation models”. They’re still retaining those inputs, and they reserve the right to use them for training proprietary or specialized models, like safety-filters or summarizers meant to act as part of their broader AI platform, which could leak down the line.

That’s also assuming Microsoft are competent, good-faith actors — which they definitely aren’t.

This is some pathetic chuddery you’re spewing…

You wouldn’t assume that QA can read every email you send through their mail servers ”just because”

I absolutely would, and Microsoft explicitly maintains the right to do that in their standard T&C, both for emails and for any data passed through their AI products.

https://www.microsoft.com/en-us/servicesagreement#14s_AIServices

v. Use of Your Content. As part of providing the AI services, Microsoft will process and store your inputs to the service as well as output from the service, for purposes of monitoring for and preventing abusive or harmful uses or outputs of the service.

We don’t own Your Content, but we may use Your Content to operate Copilot and improve it. By using Copilot, you grant us permission to use Your Content, which means we can copy, distribute, transmit, publicly display, publicly perform, edit, translate, and reformat it, and we can give those same rights to others who work on our behalf.

We get to decide whether to use Your Content, and we don’t have to pay you, ask your permission, or tell you when we do.

Your general understanding is entirely correct, but:

Microsoft is almost certainly recording these summarization requests for QA and future training runs; that’s where the leakage would happen.

It’s a bit wandering, but this piece has great insight on the whole and explains the motivations behind a lot of abstract modern tooling.

As a grugbrained/anti-complexity type of designer, I was pleased that the author did such a good job aligning their arguments so that they were equally relevant to single-node hegemonic deployments just as much as Web-Scale ™ microservice soup.

Why do we pretend like it’s necessary to have a CIA as part of the U.S. government? Between the nepotism and complete lack of public accountability they justify by claiming it’s necessary to “protect America,” they might as well just be a private corporation.

It really seems like the entire purpose of the agency is just to help rich people in the U.S. do fucked up shit at home and around the globe to destroy democracy in the name of “spreading democracy.”

There’s a book I love called The Very Best Men by Evan Thomas that shares this thesis. The author is a well-regarded Washington journalist and insider who was given access to the CIA’s archives.

He starts off by playing the title straight, humanizing his main subjects, explaining their ideological motives and justifications, and playing up their esteemed credentials and education. Then he goes into the practical effects of their actions and shows that in practice, they were terrible people who pumped out a steady stream of incompetent gaffes, own-goals, and international crimes.

There’s a very similar vibe to the Epstein files: The shadowy kabbalic figures were, in the cold light of day, grade A morons and it’s a miracle they had any success covering their tracks at all.

It’s just a meme site that was posted to HN and took off.

No investors or purpose beyond putting a pool of chatbots together and watching the slop proliferate.

unless you consider it hard coded because its coded into the codebase

That’s precisely the common definition and understanding of the term.

E: Sorry, I see what you mean in context now. I thought we were talking about a different piefed feature with a similar anti-4chan label that used a set of hardcoded strings to blacklist comments. Yeah, the tesseract image filter isn’t quite what I’d call hardcoded in and of itself.

BOY do I have some bad news.

https://www.lemkininstitute.com/single-post/mass-grave-complex-mgc-identification-and-analysis-of-grave-site-candidates-gsc-1-2-at-cecot

The author:

Retired USAF combat medic with extensive real-world experience as a mass grave complex investigator and genocide site analyst.

In high school, we used to play a game colloquially called Spoons/Assassins/Spoon Assassin/Marker tag. Long story short, everyone playing gets assigned another player as a target. You tag your target on the back of the neck with a spoon or marker to “kill” them + take over their assignment. Rinse and repeat until only the winner is standing.

Major catch here is that for the game to work properly, the targets have to be chained in a loop, so there usually has to be a trusted individual running the game who can validate the assignment list.

So I scraped the online school directory to pull names, emails, and school photos of everyone. Then I built a Java Swing app to track a list of who was playing, and the app would shuffle a random list and email everyone their assignments blindly, photos included. Flash forward a few months, and eventually we had a full roster of ~80 people playing across grades, which was ~10% of the student body.

Unfortunately, a group of freshmen started their own take on the game, which devolved into mauling one another with Crayola markers and Sharpies. The principal catches word that I’ve been running a ring, and brings me into his office to tell me to shut it down.

Uncharacteristically for my teenage years, I went all-in on diplomacy. I plead my case, tell him I’m not involved with the freshmen, hear out his concerns, volunteer to modify the game rules, and point out that our group been playing for months without issues. No dice; the dude was a jackass with a chip on his shoulder. So we come to an impasse, staring at one another in silence.

Eventually, to break the silence, he asks about a stray bandage I have sticking out the top of my shirt. I’d had a small melanoma removed from my collarbone that week, which was caught as early as possible and removed without issue. Seizing the opportunity, I tell the principal “I have cancer”, and immediately walk out before he could formulate a response. Poor dude went white as a sheet. Good times.

Bit of a lame ending for the app, but building it taught me the skills I used to jump-start my career, and drove home the point that software isn’t an end unto itself — it’s the way people use it to come together that makes things great.

Removed by mod

Removed by mod

Removed by mod

Removed by mod

Sorry, I assumed you were intelligent and sanewashed your comment.

I assumed you were talking about the fact that internal web servers that services like Jellyfin run are often DoSable without a proxy.

Jellyfin is quite literally a web app and perfectly safe to host on the web. Wanna prove me wrong? I’ll happily spin up an instance and throw a $500 bounty on there for you.

https://en.wikipedia.org/wiki/Groom_of_the_Stool

Removed by mod

Removed by mod

Removed by mod

Removed by mod

Just a thought, but you might be able to do this easier by looking at atime and mtime rather than fiddling with the API.