Read Time:1 Minute, 40 Second

On Friday, OpenAI informed users that a bug in Redis’s open-source library was responsible for disclosing personal information and chat titles exposed earlier this week via the upstart’s ChatGPT service.

OpenAI, the renowned AI research laboratory, has disclosed that a bug in its popular language model ChatGPT could have given it the ability to listen in on conversations.

The revelation comes when many people are concerned about the privacy of their digital devices, particularly their smartphones.

As soon as the bug was discovered on March 20, 2023, certain users could see it in the chat history sidebar of the app, allowing them to view brief descriptions of other users’ conversations. In response, the chatbot was temporarily shut down by the company.

The company said, “It’s also possible that the first message of a newly-created conversation was visible in someone else’s chat history if both users were active around the same time.”

“The bug originated in the redis-py library, leading to a scenario where canceled requests could cause connections to be corrupted and return unexpected data from the database cache, in this case, information belonging to an unrelated user.”

OpenAI researchers discovered the bug in ChatGPT during a routine review of its systems. They found that a popular software component called Redis, used to manage data, was vulnerable to exploitation.

Hackers could have exploited the vulnerability to execute commands on the Redis database, which could have given them access to sensitive user information, including voice recordings and text messages.

While there is no evidence that the bug was ever exploited, OpenAI quickly patched the vulnerability and ensured it could not be exploited.

However, the discovery has raised concerns about the security and privacy of AI-powered devices, including smartphones and smart speakers, which have become ubiquitous daily.

While OpenAI has addressed the issue, the incident serves as a reminder of the potential risks associated with these devices and the importance of transparency, accountability, and user education in their development and use.

Happy
Happy
0 %
Sad
Sad
0 %
Excited
Excited
0 %
Sleepy
Sleepy
0 %
Angry
Angry
0 %
Surprise
Surprise
0 %
Previous post Italian Sports Car Hit by Cyberattack, Hacked Details Up for Ransom
Next post Git Operations Are Protected by an Updated RSA SSH Key From Github