YHK - yet another hacker news clone

49 points user052919 1 hour ago 19 comments

My company is pretty paranoid about leaking IP to the frontier labs through prompts, so we've all been diligent about disabling data sharing in Codex/Claude Code/etc. But yesterday my coworkers and I noticed that the setting had been silently reenabled in Codex. None of us knowingly opted back in.

You can check your settings here: https://chatgpt.com/settings/data-controls. Look for "Improve the model for everyone".

Curious if this is an isolated issue or something more widespread.

EDIT: looks like this has been noted before https://news.ycombinator.com/item?id=49643556

EDIT: apparently you can also turn off data sharing here: https://privacy.openai.com/policies?modal=take-control

spwa4 53 minutes ago | parent

OpenAI is also now hiding your usage. Not accessible anymore in the menu, and /usage in the codex app now also gives a lot of stats, but the one stat you do want to know, how much limit left, is no longer there.

I'm guessing another big usage reduction is coming soon.

pizza234 44 minutes ago | parent

> Not accessible anymore in the menu, and /usage in the codex app now also gives a lot of stats

Codex shows the usage limits on /status - Claude instead does it on /usage.

user052919 36 minutes ago | parent

fwiw I can still see my usage in the Codex app

wisemanwillhear 25 minutes ago | parent

Mine got move out of the user menu on the lower left to just above the user menu as it's own clickable selection. The other day, I though they took the old quick view of usage away, and started going back to the settings to look. Turns out they just moved it.

monster_truck 45 minutes ago | parent

If your company actually cared about this they would be running their own inference instead of leaving fate to a couple of checkboxes.

rs999gti 36 minutes ago | parent

Agreed. Azure, GCP, and AWS have gated models that only exist in their infrastructures and can't dial out unless yous give them permissions to do so.

Don't use a models only company if you need enterprise level security and data protection.

user052919 34 minutes ago | parent

fair enough, but I still think it's an ethical issue for the model providers to silently reenable training after people have explicitly opted out

monster_truck 29 minutes ago | parent

It didn't happen to me, nobody I know seems to have experienced this. How can you prove to us that you ever toggled it off in the first place? This is a pretty serious accusation to make so blindly

user052919 19 minutes ago | parent

Not an accusation! Just seems like it's happening, which is why I wanted to post this to ask if others noticed the same thing. I definitely can't prove it. If it had just been me I would have assumed I forgot to turn it off. But the fact that my coworkers noticed the same thing made it suspicious. Also the linked HN thread suggested others have seen this happening too

CEOatMindfries 44 minutes ago | parent

May be the coding agents should build a layer when they don't leak any IP, treat them like environment variables, which must be handled deterministically.

edot 34 minutes ago | parent

Turn on advanced account security. You should be doing this anyways (requires hardware keys). But it also locks data sharing off.

tom1337 29 minutes ago | parent

Unfortunately, they are also changing that a bit:

> Thank you for using Daybreak Blue and for being part of our Trusted Access program. We are reaching out to notify you of an upcoming change to how your Daybreak Trusted Access data may be used. Daybreak use requires you to enroll in Advanced Account Security, which turns off the “improve the model for everyone” setting. However, from November 29, we may use content from Daybreak Blue sessions on personal accounts to improve our models, including to help strengthen safeguards against cyber misuse. We will use Daybreak Blue interactions for these purposes, even when the “improve the model for everyone” setting is off.

bentt 30 minutes ago | parent

Don't trust this company.

_doctor_love 28 minutes ago | parent

When you think about it, it's really terrible for your training data to be sitting on your machine uningested. It ought to be centrally located. You know, for the greater good.

vibranium 26 minutes ago | parent

If you really care, sign a ZDR contract with OpenAI or use Bedrock or something.

rglullis 17 minutes ago | parent

If you *really* care, run your own inference. Everything else is just wishful thinking and/or convenience winning over self-sovereignty.

hyperbovine 10 minutes ago | parent

Never ascribe to malice that which can be explained by stupidity.

The quality of their software is such crap and this is probably just some vibe coding mishap. Go read the Github issues for Codex CLI for example -- robots talking past other robots. I am 99.9% certain not a single human being has a deep understanding of what is going on with the Codex app anymore.

thewhitetulip 6 minutes ago | parent

They said that they have millions of lines of PRs merged daily

Pretty sure they don't know this has happened lol

Maybe they'll raise a new PR with 1000000 lines to revert back now that you guys leaked the information