this post was submitted on 06 Jul 2024
41 points (100.0% liked)
TechTakes
1436 readers
123 users here now
Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.
This is not debate club. Unless it’s amusing debate.
For actually-good tech, you want our NotAwfulTech community
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
right, at which point you're just better doing it the right way from the beginning, not to mention such tiny detail as not shoving classified information into sam altman's black box
I'm not really arguing the merit, just answering how I'm reading the article.
The systems are airgapped and never exfiltrate information so that shouldn't really be a concern.
Humans are also a potential liability to a classified operation. If you can get the same results with 2 human analysts overseeing/supplementing the work of AI as you would with 2 human analysts overseeing/supplementing 5 junior people, it's worth evaluating. You absolutely should never be blindly trusting an LLM for anything. They're not intelligent. But they can be used as a tool by capable people to increase their effectiveness.
it's not airgapped, it's still cloud, it can't be. it's some kind of "secure" cloud that passed some kind of audit. openai already had a breach or a few, so i'm not entirely sure it will pan out
Iirc OpenAI uses Microsoft's cloud?
If so, MSFT has a special airgapped cloud specifically for USGov.
they probably do. I worked for a content-as-a-service company that had a contract to deliver our product, airgapped, to a three-letter agency on a regular schedule, and we were a tiny company. Microsoft's biggest customer is probably the U.S. government; I'd be shocked if they don't provide an in-house airgapped set of full Azure services for the entire intelligence agency system.
They do. Source: I worked in at MSFT in Azure Identity. It's completely separate, has its own rollout schedule for all products, etc.
There's also a physically separate cloud for China 🙃
tbh I personally wouldn’t expect/suspect this to be using any of the flavours of govcloud for mass-market flavours (because that has implications on staff hiring etc)
the easy way to handle this is to have a backend/frontend separation with baseline access controlled simply by construction of routing and zone primitives. it’s relatively simple (albeit moderately involved) to do this on most cloud providers