ChatGPT leaks user credit card details

cybernews.com

40 points·PikelEmi··8 comments

The headline is a bit misleading. It's nothing the AI did, it was a misconfiguration of the website itself.

I wouldn't 100% call this misconfiguration. This bug in redis-py was discussed already. Nobody is insured from this.

> The user’s first and last name, email address, payment address, the last four digits (only) of a credit card number, and credit card expiration date. Full credit card numbers were not exposed at any time,

So, the last four digits, which is also on most receipts I've thrown in the trash [1].

I'm much more annoyed at the email address and home address relation.

1. https://security.stackexchange.com/questions/145070/how-many...

What horror stories happen when people in general, discover your email and home address?

Probably not a good question to ask, but I am wondering..

I don't like it when strangers on the internet know where I live, based on an extremely public string.

For an example of the discomfort, and so we're in a similar mental framing, could you please respond to this with your email address and home address? ;P

Hahah the temptation! I understand the discomfort. The celebrities and even d-list celebs tell some 'interesting' tales about unwanted fan interactions.

In certain circles, there's always a risk of swatting[1].

If you're anonymous online and your physical address is leaked, that could lead to doxxing[2] that could eventually lead to the aforementioned swatting.

N.b. Swatting is mostly a US thing.

[1]: https://en.m.wikipedia.org/wiki/Swatting

[2]: https://en.m.wikipedia.org/wiki/Doxing

With all this downtime and reduced interface, are pro users expecting a refund on this months service ?

Reply on news.ycombinator.com