This should be obvious for everyone by now, but if you're not from US you must assume that all your use of US AI services (#ChatGPT, #Claude, #Gemini etc) is fed directly to US intelligence services.

[harrysintonen@infosec.exchange]

This should be obvious for everyone by now, but if you're not from US you must assume that all your use of US AI services (#ChatGPT, #Claude, #Gemini etc) is fed directly to US intelligence services.

"We may share your Personal Data, including information about your interaction with our Services, with government authorities ... in compliance with the law (i)" (OpenAI)

"We may disclose personal data to governmental regulatory authorities as required by law" (Claude)

"We will share personal information outside of Google ... to: Respond to any applicable law, regulation, legal process, or enforceable governmental request" (Gemini)

The amount of valuable information fed to the systems voluntarily is staggering. It's not a matter of "if" it is happening, but "of course it is". It would be outright negligent if they weren’t capturing and disseminating it all.

https://en.wikipedia.org/wiki/Foreign_Intelligence_Surveillance_Act#Without_a_court_order
https://en.wikipedia.org/wiki/Foreign_Intelligence_Surveillance_Act#Amendments

#privacy

[harrysintonen@infosec.exchange]

China is of course doing the same for any information fed to their online systems, for example DeepSeek.

[andrew@this.wplr.rocks]

@harrysintonen Wow, you can't even use DeepSeek anonymously.

[kleisli@mastodon.social]

@harrysintonen I assume every legally operated service is sharing data "in compliance with the law", also Mistral. The problem starts, when Donnie Trump is "the law" and/or when the company operates in a fascist country.

[harrysintonen@infosec.exchange]

@kleisli That is the only safe assumption, indeed. My self-hosting helps to a degree: https://infosec.exchange/@harrysintonen/115916299816297773

[kleisli@mastodon.social]

@harrysintonen Unless you have a server in your basement or you have encrypted all data, it doesn't protect your data from the authorities, because also hosting providers will hand over data "in compliance with the law". This is not a bad thing per se, it depends on the law what your country is considering a crime.

[harrysintonen@infosec.exchange]

@kleisli Everything is encrypted of course. Some services are in my basement, too. Also encrypted.

Authorities have permission to install technical listening devices of course, but that requires permissions from courts, and suspicion of extremely serious crimes, such as terrorism. It seems quite unlikely that the local system would ever be perverted in a way that this could be abused.

[nicelymanifest@mastodon.social]

@harrysintonen As I have said too often, Capitalism in its cancer phase will exploit rather than serve people on its path to destroying the public host ...

[nf3xn@mastodon.social]

@harrysintonen We were rather counting on it.

[pattyhanson@mastodon.social]

@harrysintonen Unless you are a virgin in the social media world, your information, as much as you have entered, has already been shared and sold over and over to unknown entities. The day you opened your very first social media account, whether it was OurSpace or Facebook or any others, your privacy was gone.

[jeanmimi@mamot.fr]

@harrysintonen don’t name openbsd to him.