On Friday, OpenAI informed users that a bug in Redis’s open-source library was responsible for disclosing personal information and chat titles exposed earlier this week via the upstart’s ChatGPT service.
OpenAI, the renowned AI research laboratory, has disclosed that a bug in its popular language model ChatGPT could have given it the ability to listen in on conversations.
The revelation comes when many people are concerned about the privacy of their digital devices, particularly their smartphones.
As soon as the bug was discovered on March 20, 2023, certain users could see it in the chat history sidebar of the app, allowing them to view brief descriptions of other users’ conversations. In response, the chatbot was temporarily shut down by the company.
The company said, “It’s also possible that the first message of a newly-created conversation was visible in someone else’s chat history if both users were active around the same time.”
“The bug originated in the redis-py library, leading to a scenario where canceled requests could cause connections to be corrupted and return unexpected data from the database cache, in this case, information belonging to an unrelated user.”
OpenAI researchers discovered the bug in ChatGPT during a routine review of its systems. They found that a popular software component called Redis, used to manage data, was vulnerable to exploitation.
Hackers could have exploited the vulnerability to execute commands on the Redis database, which could have given them access to sensitive user information, including voice recordings and text messages.
While there is no evidence that the bug was ever exploited, OpenAI quickly patched the vulnerability and ensured it could not be exploited.
However, the discovery has raised concerns about the security and privacy of AI-powered devices, including smartphones and smart speakers, which have become ubiquitous daily.
While OpenAI has addressed the issue, the incident serves as a reminder of the potential risks associated with these devices and the importance of transparency, accountability, and user education in their development and use.
More Stories
Killnet and AnonymousSudan Collaborate to Launch Cyber Attacks on Western Organisations
In recent news, it has been reported that two Russia-sympathetic hacktivist groups, Killnet and AnonymousSudan, have allegedly launched a series...
$4000 Gone In An Instant: Mother Defrauded in Facebook Marketplace Car Deal
A mother of four is warning others to be cautious after believing she had purchased a safe and dependable car...
Shocking Scam: Sydney Family Loses $200K Life-Savings in Suncorp Spoofing Fraud
A family from Sydney has lost their life savings worth $200,000 due to a fraudulent scam. Peter and Madison, who...
Mysterious Money Transfer Leaves Couple Speechless: How They Got an Unsolicited $4000
A young couple in Melbourne claims their bank is making up a personal loan they do not understand. Ashley and...
Phishing + AI + Voice Cloning= Big Trouble: The New Way Criminals are Stealing Your Money
New Alert: Criminals use AI and voice cloning to trick you out of your money. Earlier this year, Microsoft unveiled...
‘Impossible to Spot’ Delivery Scam Email Targets Australia Post Customers – Don’t Fall Victim!
Unsuspecting shoppers should be cautious as a parcel delivery scam that is hard to distinguish targets Australia Post customers. Email...