News for hackers. Stuff that matters.
Re:200k Compromised OpenAI Credentials Available for Purchas... by omeze on Wednesday August 02, 2023 @11:07PM (#36980888)
I seriously wonder why, given the Microsoft deal, OpenAI didn't just cede all product development and production-izing of their models to MS while they focus on research.

I know smart people work there, some friends included, but OpenAI was never a product-led startup, they were a research org. Ignoring the closed vs open debate for a moment: for all the talk of focus, focus, focus from YC, it seems unfocused to ship their models from a home-rolled platform when they could just get MS to foot the engineering and infra work. Is any of their platform stuff a real asset to OpenAI proper? Have MS do the cloud stuff, just pass them product design.

just my 2c from the outside.

Re:200k Compromised OpenAI Credentials Available for Purchas... by itissid on Wednesday August 02, 2023 @11:38PM (#36981066)
Noob Thought on why OpenAI collaborated with MS:

1. I have found ChatGPT is very good at parroting back decent quality from learning from structured data. For example, learning reasonable code completions as well as answering technical questions. I find ChatGPT very good resource to have inside VSCode instead of switching to google. 6-7/10 I will accept GPTs output in Copilot.

2. My guess is that Microsoft's pretty chunk of profit is from selling Developer software(or so it is trying to do).

Put 1 + 2 together and you have a pretty compelling product play.

Re:200k Compromised OpenAI Credentials Available for Purchas... by haldujai on Wednesday August 02, 2023 @11:54PM (#36981163)
They have much larger plays and interests than developer software such as Office/Outlook. Also stops Google from making the same deal as OpenAI needed credits from someone.
Re:200k Compromised OpenAI Credentials Available for Purchas... by vineyardmike on Wednesday August 02, 2023 @11:27PM (#36980996)
Because when you accidentally discover a golden goose, you don’t give it to Microsoft, you learn to cook eggs.

I had the same thought as you at first, and many people speculated they’d shutter ChatGPT in favor of the API being served to others. But while anyone can sell an API, making a consumer product people want is just too rare to give it up. It’s better to learn how to service consumers and satisfy the demand.

Everyone was quick to point out that the API costs of a chatGPT clone were a fraction of the cost of ChatGPT+. So why would they focus on research and API development? I worry that they were so successful with this LLM that they’ll forget to keep researching other stuff.

Re:200k Compromised OpenAI Credentials Available for Purchas... by omeze on Wednesday August 02, 2023 @11:43PM (#36981103)
That's my worry, too. I'm reminded of the history of Intel, which at its founding decided that it would not have a research org (drop the R from R&D) and just focus on scaling FETs, because the founders learned that trying to do both meant that one would ultimately suffer.
Re:200k Compromised OpenAI Credentials Available for Purchas... by p1esk on Thursday August 03, 2023 @12:34AM (#36981397)
Scaling FETs is not research?
Re:200k Compromised OpenAI Credentials Available for Purchas... by notnaut on Thursday August 03, 2023 @01:21AM (#36981712)
It’s all research - it’s just that when you get a taste of the money, the trend is often to lean heavy towards more of it. Wasteful, frivolous curiosity often falls into the rear view.
Re:200k Compromised OpenAI Credentials Available for Purchas... by p1esk on Thursday August 03, 2023 @10:42PM (#36994851)
There are not a lot of places where you can pursue "wasteful and frivolous curiosity". And even at those places, you would need to have earned the privilege.
Re:200k Compromised OpenAI Credentials Available for Purchas... by bestcoder69 on Wednesday August 02, 2023 @11:18PM (#36980953)
What did OpenAI do wrong here? As far as I can tell they're guilty of requiring logins?
Re:200k Compromised OpenAI Credentials Available for Purchas... by omeze on Wednesday August 02, 2023 @11:38PM (#36981064)
It's not requiring logins per se -- this is the second mishap I'm aware of related to their consumer product surface area (the first being users' chat data going to other users). Just seems like a distraction, if the goal is to do fundamental AI research.
Re:200k Compromised OpenAI Credentials Available for Purchas... by lolinder on Wednesday August 02, 2023 @11:45PM (#36981119)
I think you're missing the point: this isn't a mishap that has anything to do with OpenAI. If you are a company that has usernames and passwords, then your login information is for sale because your customers have malware on their computers. OpenAI didn't do anything wrong here besides have a ton of users, many of which had malware on their computers.

From the article:

> However, the ChatGPT parent company clarified the compromised login credentials were not the result of any OpenAI data breach. Instead, they were the by-product of commodity malware-based log harvesting.

Re:200k Compromised OpenAI Credentials Available for Purchas... by owl57 on Thursday August 03, 2023 @01:10AM (#36981637)
> If you are a company that has usernames and passwords

> didn't do anything wrong here besides have a ton of users

Passwords aren't a trivial part of this. OpenAI offers login with Google/Apple/MS. Managing their own passwords as well wasn't a mandatory part of the product, but a trade off: they probably got more users, but also more complexity and risks.

Re:200k Compromised OpenAI Credentials Available for Purchas... by SV_BubbleTime on Thursday August 03, 2023 @01:42AM (#36981848)
Federation has a privacy risk, and I fully support non-federated logins.

But still no, a malware thst grabs passwords doesn’t mean you can blame a company for using passwords.

Re:200k Compromised OpenAI Credentials Available for Purchas... by warbeforepeace on Wednesday August 02, 2023 @11:39PM (#36981070)
He didn't read the article. Headline and comment.
Re:200k Compromised OpenAI Credentials Available for Purchas... by warbeforepeace on Wednesday August 02, 2023 @11:40PM (#36981077)
you didn't read the article.

The stolen OpenAI credentials were stolen using Raccoon Infostealer (78,348), Vidar (12,984), and RedLine (6,773) malware variants.

Just my 2 cents.

Re:200k Compromised OpenAI Credentials Available for Purchas... by omeze on Wednesday August 02, 2023 @11:46PM (#36981125)
you think you're much more clever than you are... what does that have to do with my comment?

my point is that having a large consumer product surface area is not normally congruent with the goals of a research org. there would be no chatgpt login headline if it was just a research demo

Re:200k Compromised OpenAI Credentials Available for Purchas... by jrflowers on Wednesday August 02, 2023 @11:55PM (#36981171)
I’m guessing the person you’re responding to wasn’t clever enough to figure out that your comment was completely off topic and had nothing whatsoever to do with the article. Only a true genius could see that you saw “openai” and hit the post button with the force of Mjolnir.
Re:200k Compromised OpenAI Credentials Available for Purchas... by worthless-trash on Wednesday August 02, 2023 @11:51PM (#36981144)
Your point is reductionary though.

You can't make omelette without eggs, more news at 11. Back to you in the studio John.

Re:200k Compromised OpenAI Credentials Available for Purchas... by justapassenger on Wednesday August 02, 2023 @11:11PM (#36980909)
OpenAI doesn’t make money from research.
Re:200k Compromised OpenAI Credentials Available for Purchas... by omeze on Wednesday August 02, 2023 @11:16PM (#36980945)
Yes, hence the MS deal (they had trouble raising money as a pure research org). Their research can be turned into a product people pay for -- they've done it! My question is: why did the engineers at OpenAI have to do that? Why couldn't they "toss it over the fence" to MS's Azure team and be happy with a revenue share, for example.
Re:200k Compromised OpenAI Credentials Available for Purchas... by justapassenger on Thursday August 03, 2023 @12:33AM (#36981394)
MS didn’t buy them, just invested shit ton of money and got a close partnership.

Don’t outsource your money making department to a big tech company. They’ll screw you over, even if they don’t mean to.

Re:200k Compromised OpenAI Credentials Available for Purchas... by droopyEyelids on Wednesday August 02, 2023 @11:15PM (#36980935)
They dont make money from authentication systems either
Re:200k Compromised OpenAI Credentials Available for Purchas... by vimy on Wednesday August 02, 2023 @11:15PM (#36980934)
Chatgpt is programmer art. I don’t think they have actual designers or frontend devs working there.

I accidentally deleted my chat history because of the confusing UX.

Re:200k Compromised OpenAI Credentials Available for Purchas... by tomrod on Wednesday August 02, 2023 @11:50PM (#36981138)
Eh, MS isn't great engineering IMHO. It's good enough but nowadays tends to have flaky edge cases.
Re:200k Compromised OpenAI Credentials Available for Purchas... by carom on Wednesday August 02, 2023 @11:51PM (#36981152)
Microsoft is not doing so great in the security department right now.

>Microsoft comes under blistering criticism for “grossly irresponsible” security

https://news.ycombinator.com/item?id=36979532

Re:200k Compromised OpenAI Credentials Available for Purchas... by anonzzzies on Wednesday August 02, 2023 @11:56PM (#36981182)
Re:200k Compromised OpenAI Credentials Available for Purchas... by skybrian on Thursday August 03, 2023 @12:05AM (#36981235)
One reason for having their own consumer website is that having lots of data from actual users should be quite helpful for training. I believe they promised not to use the data from other companies that use their API?

It's also good marketing. For the people who use ChatGPT every day, they're a known quantity, unreliable as it is. Other companies need to show that they're better.

These are both similar advantages to what Google has with their search engines.