CodeSecDays 2024 - Join GitGuardian for a full-day exploration of cutting-edge DevSecOps solutions!

Save my spot!

CodeSecDays 2024 - Join GitGuardian for a full-day exploration of cutting-edge DevSecOps solutions!

Save my spot!

Should organisations Block ChatGPT and other LLMs? Data privacy

With data leaks from AI systems like ChatGPT becoming an increasing concern should organizations block them and will that work for security and data privacy.

Video Transcript

um but you don't hear a lot about the security side what are you hearing from the Enterprises out there about their concerns in this is this something you're bringing up to them and they're shocked or something they're already thinking about oh yes uh cisos are definitely already thinking about this um some companies have put already put some minor policies in place about the data they put into these prompts others uh just flat out blocking it um I'd say the entire banking indry is just flat blocking it but uh they're only blocking one endpoint or maybe two and there last count I think there was 873 different applications on the web or extensions that use GPT in some sort of fashion so to effectively block that you have to block all of them which is so is is is blocking feasible Is it feasible to block 850 applications and have a service that does that is that is is that the solution to be able to do this BL blocking them does does that work well then you could just use a proxy or VPN how many seconds does that take yeah okay so no so so so so what what are the other responses that companies are doing then so if if I mean blocking it seems to be the kind of the only tool that they have in the tool boox at the moment what what are some of the other more proactive companies doing about protecting their data from going into these types of systems um I've seen a few browsers extensions um that were trying to do it but only at a they weren't doing it very well I checked them out um there are some DP Solutions in the market that can handle copy pastes um though that doesn't but then then you're all the text entry all the dragon drops um file opens they they miss all those ones um yeah it's a big problem I mean there there are multiple Avenues to integrate or to inter interact with the browser and then it's not just the browser it's uh or the browser window itself um a lot I I downloaded a couple JB expansions that aren't in the browser they're in the toolbar and so that that's that's in the windows system and there number of apps they can download that or just get uh apps that connect to gbt natively through the desktop um and then all the different types Windows base the Java um you even talk about Flash um yeah it's it's not a problem that can be solved with just uh blocking a endpoint