Copilot broke audit logs, but Microsoft won't tell customers

Re:Copilot broke audit logs, but Microsoft won't tell customers by redwood on Wednesday August 20, 2025 @05:43AM (#44960322)

But you process that list in a trusted audited app tier not in the client environment

[ Parent | on HN ]

Re:Copilot broke audit logs, but Microsoft won't tell customers by lixtra on Wednesday August 20, 2025 @06:14AM (#44960512)

A naive approach could still leak information through side channels. E.g. if you search regularly for foobar, the answer might suddenly get slower if foobar appears more in the document base.

Depending on the context it could be relevant.

[ Parent | on HN ]

Re:Copilot broke audit logs, but Microsoft won't tell customers by shawnz on Wednesday August 20, 2025 @10:14AM (#44962170)

That's nothing specific to LLM-enhanced search features though, right? Any search feature will have that side channel risk

[ Parent | on HN ]

Re:Copilot broke audit logs, but Microsoft won't tell customers by hannasanarion on Thursday August 21, 2025 @02:13AM (#44969580)

But we're talking about access control, so in this case "filtering for foobar" means "filtering for stuff I'm allowed to see", and the whole point is that you can never turn that filter off to get a point of comparison.

If Joe's search is faster than Sally's because Sally has higher permissions, that's hardly a revelation.

[ Parent | on HN ]