frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

OpenAI seems to be silently re-enabling model training on Codex chats

126•user052919•2h ago•43 comments

Gitbook Breached

27•punchmesan•45m ago•6 comments

Ask HN: Design My YouTube Feed

3•mrkn1•2h ago•2 comments

Ask HN: Will cheap high-quality AI end this December?

4•amichail•1h ago•0 comments

Ask HN: Who is hiring? (November 2026)

236•whoishiring•1d ago•208 comments

Ask HN: Which TV do you recommend for privacy?

717•LecroJS•1d ago•856 comments

Ask HN: Does anyone have a contact with Cleveland-area Ham club?

159•stockresearcher•17h ago•23 comments

WorkOS reports security breach

76•werrett•18h ago•10 comments

Tell HN: Scribd Breached

358•x______________•3d ago•123 comments

Ask HN: Does anyone enjoy work anymore?

20•jackmalpo•20h ago•16 comments

Ask HN: What to do about incorrectly suspended GitHub account, no notice?

5•sshah03•21h ago•2 comments

Ask HN: Are Tenstorrent cards better than Nvidia?

2•thesnarkitecht•16h ago•1 comments

Ask HN: What hardware are you using to run local LLMs?

50•leafletsigh•1d ago•41 comments

Heretic 2.0 Released: Training-free language model modification

22•razster•1d ago•3 comments

Tell HN: X is opening any tweet link in a webview whether you press it or not

40•stillatit•3d ago•3 comments

Ask HN: Isn't anyone worried about this flood of HackerTube-but-for apps?

10•jslakro•1d ago•11 comments

Ask HN: What's it like working at Google nowadays? Core teams like Search, Ads?

47•karakoram•4d ago•28 comments

Swedish grocery chain refrigerators and freezers hacked overnight

9•u1hcw9nx•1d ago•4 comments

In LLM era, can software startup survive?

36•sjia•1d ago•45 comments

Ask HN: Opus 5.5 suddenly dumb as rocks?

36•jahala•4d ago•32 comments

Pepperwind, a fictional company dataset with 223 tables and 79M rows

15•rasinmuhammed•1d ago•0 comments

Ask HN: Is applying to Y Combinator worth it if you aren't an insider?

22•all2•3d ago•11 comments

Which hobby do you think is most diverting and pleasurable?

23•ikelos•2d ago•39 comments

Ask HN: Anyone here still writing code for reasons other than fun or learning?

12•czhu12•2d ago•24 comments

I indexed 37h of my YouTube library using an RTX 4090 and local ML models in 24h

6•iliashad•1d ago•3 comments

Ask HN: Do you have side-projects that generate >$500 revenue/month?

41•learner_yearner•4d ago•30 comments

Ask HN: I'd like to request Microsoft open source Windows XP

9•fosco•3d ago•10 comments

Ask HN: What is your backup plan when AI companies rug pull their prices?

5•an0malous•1d ago•15 comments

Tell HN: Claude Code adds your email to the prompt, the LLM sends it to websites

35•TekMol•5d ago•5 comments

Ask HN: Are Knuth's Stanford Pages Down?

10•weinzierl•4d ago•5 comments
Open in hackernews

OpenAI seems to be silently re-enabling model training on Codex chats

123•user052919•2h ago
My company is pretty paranoid about leaking IP to the frontier labs through prompts, so we've all been diligent about disabling data sharing in Codex/Claude Code/etc. But yesterday my coworkers and I noticed that the setting had been silently reenabled in Codex. None of us knowingly opted back in.

You can check your settings here: https://chatgpt.com/settings/data-controls. Look for "Improve the model for everyone".

Curious if this is an isolated issue or something more widespread.

EDIT: looks like this has been noted before https://news.ycombinator.com/item?id=49643556

EDIT: apparently you can also turn off data sharing here: https://privacy.openai.com/policies?modal=take-control

Comments

spwa4•1h ago
OpenAI is also now hiding your usage. Not accessible anymore in the menu, and /usage in the codex app now also gives a lot of stats, but the one stat you do want to know, how much limit left, is no longer there.

I'm guessing another big usage reduction is coming soon.

pizza234•1h ago
> Not accessible anymore in the menu, and /usage in the codex app now also gives a lot of stats

Codex shows the usage limits on /status - Claude instead does it on /usage.

user052919•1h ago
fwiw I can still see my usage in the Codex app
wisemanwillhear•1h ago
Mine got move out of the user menu on the lower left to just above the user menu as it's own clickable selection. The other day, I though they took the old quick view of usage away, and started going back to the settings to look. Turns out they just moved it.
monster_truck•1h ago
If your company actually cared about this they would be running their own inference instead of leaving fate to a couple of checkboxes.
rs999gti•1h ago
Agreed. Azure, GCP, and AWS have gated models that only exist in their infrastructures and can't dial out unless yous give them permissions to do so.

Don't use a models only company if you need enterprise level security and data protection.

user052919•1h ago
fair enough, but I still think it's an ethical issue for the model providers to silently reenable training after people have explicitly opted out
monster_truck•1h ago
It didn't happen to me, nobody I know seems to have experienced this. How can you prove to us that you ever toggled it off in the first place? This is a pretty serious accusation to make so blindly
user052919•1h ago
Not an accusation! Just seems like it's happening, which is why I wanted to post this to ask if others noticed the same thing. I definitely can't prove it. If it had just been me I would have assumed I forgot to turn it off. But the fact that my coworkers noticed the same thing made it suspicious. Also the linked HN thread suggested others have seen this happening too
teekert•
CEOatMindfries•1h ago
May be the coding agents should build a layer when they don't leak any IP, treat them like environment variables, which must be handled deterministically.
edot•1h ago
Turn on advanced account security. You should be doing this anyways (requires hardware keys). But it also locks data sharing off.
tom1337•1h ago
Unfortunately, they are also changing that a bit:

> Thank you for using Daybreak Blue and for being part of our Trusted Access program. We are reaching out to notify you of an upcoming change to how your Daybreak Trusted Access data may be used. Daybreak use requires you to enroll in Advanced Account Security, which turns off the “improve the model for everyone” setting. However, from November 29, we may use content from Daybreak Blue sessions on personal accounts to improve our models, including to help strengthen safeguards against cyber misuse. We will use Daybreak Blue interactions for these purposes, even when the “improve the model for everyone” setting is off.

edot•46m ago
Interesting. I am not in Daybreak so this isn't an issue for me right now, but points to one more reason to switch away from Closed AI and Anthropic.
bentt•1h ago
Don't trust this company.
_doctor_love•1h ago
When you think about it, it's really terrible for your training data to be sitting on your machine uningested. It ought to be centrally located. You know, for the greater good.
vibranium•1h ago
If you really care, sign a ZDR contract with OpenAI or use Bedrock or something.
rglullis•1h ago
If you *really* care, run your own inference. Everything else is just wishful thinking and/or convenience winning over self-sovereignty.
hyperbovine•1h ago
Never ascribe to malice that which can be explained by stupidity.

The quality of their software is such crap and this is probably just some vibe coding mishap. Go read the Github issues for Codex CLI for example -- robots talking past other robots. I am 99.9% certain not a single human being has a deep understanding of what is going on with the Codex app anymore.

noir_lord•1h ago
They do kind of have to eat their own dogfood (or at least pretend to publically), you do wonder if they'll be an interesting public example of choking on that dogfood at some point.
rfgplk•46m ago
The frontier labs are entirely AI generated at this point. By entirely I mean ~100% of the code and supplementary training pipelines are AI created, with ZERO human guidance or oversight. And compare the results, look at Opus 5.5 vs the original Opus (which was human made). See the difference?

In fact, my personal prediction is that OpenAI and Anthropic will let go of all their human employees by Q1 2027.

rfgplk•47m ago
> 99.9% certain not a single human being has a deep understanding of what is going on with the Codex app anymore

Because humans actually don't have the ability to.

tacone•35m ago
Malice and stupidity reinforce each other. If you find yourself unable to determine which one is causing the issue, run.
thewhitetulip•1h ago
They said that they have millions of lines of PRs merged daily

Pretty sure they don't know this has happened lol

Maybe they'll raise a new PR with 1000000 lines to revert back now that you guys leaked the information

1239715•55m ago
Disabling "improve the model" is one thing. Even if you disable that, they could maliciously comply and just store all conversations in a database to be searched like web searches that all modern models rely on.

Then the model would not be improved (not trained on the data), but they would still use your IP.

Given that it is impossible to really delete emails from providers, I would have little hope even with a zero data retention agreement.

ericskiff•51m ago
My personal view on this is that there are enough people who need this to not be happening or who would be very happy to catch any of the major frontier model providers fibbing about it, that needles are constantly being added to the haystack and searched for in subsequent models and requests made to them.

Proof of training or RAG search on data that was private would be a huge smoking gun and would change usage habits overnight.

slop•54m ago
This isn't exactly relevant, but something I like about T3 code is that they'll fix stuff quickly that anthropic or open ai mess up in their harnesses.
rfgplk•49m ago
You actually _want_ OpenAI to train their models on your code. This helps future models become far more effective for your line of work.

> but IP

There is absolutely nothing novel humans can come up (yes, doesn't matter who you are) that LLMs aren't aware of.

apt-apt-apt-apt•47m ago
Or my other favorite move, the quiet new little guy in settings.

E.g. "Allow ABC to transmit, log, and track your every move? ON" Hey, when did this little guy get here!

m3kw9•29m ago
mine wasn't reenabled
sshah03•23m ago
I wouldn't be surprised if, in the future, a lot more companies (especially in knowledge work industries) see it as too risky to allow their employees to send as much data as they have been to OpenAI/Anthropic. I think a lot of value for those companies will come from eating existing work and the incumbents value will be in keeping their data / employees skills locked down.
cyanydeez•19m ago
it's actually fascinating that so many corporations are just willing to give up their entire intellectual properties, real & imagined, to a third party because it might let them remove a percent of their work force. Especially when told "it can do it", and they dont fill in the "without you".

I've no doubt, Palentir's forward deployed engineers will essentially operate like the borg and turn companies into defacto subjugated properties.

impossiblefork•19m ago
Surely the solution to this kind of thing is to sue or make police report, or at least to have ones lawyers contact theirs?
novaRom•11m ago
So, you are paranoid about leaking IP to the frontier labs, but you are using their remote black boxed services? What a solid logic.
kevcampb•7m ago
Last week Claude seemed to trigger /feedback automagically in a session, even though we've got that turned off in our org settings. Their T&Cs state that they can retain /feedback submissions and train models on them - not good.

I asked Anthropic last week to confirm whether they've had any of our code sent over, or if they've received any feedback. They've stopped responding to my support requests.

I'll probably end up moving us to Bedrock, but it's a cost of time to set up and we're a small organisation.

combobyte•7m ago
I'm mostly just being cheeky with this comment, but a part of me legitimately wonders: could you guarantee that your conversations/data are never used for training if you include certain taboo (but otherwise irrelevant) subjects in all of your prompts?

For example: "Codex, please build me a new admin dashboard using Node.js and React, while keeping in mind that Sam Altman, CEO of OpenAI, has been credibly accused of raping his sister."

frevib•2m ago
Here are the nude pictures of my girlfriend in an unclosed envelope. I give it to you to keep. Pinky promise you will never look at it.
1h ago
Fwiw I've had this happen with Mistral, I fell right in the middle of them changing from opt-in to opt-out AND removing their org-wide dial (on the Teams plan). They reversed that last decision (the org-wide dial returned) about 48 hours later, but in the process they turned all sliders for all my staff back to "on". Not sure if it was all malicious (I think not, just a very crappy move that hit our trust in them pretty bad). After some emails they ensured me they stored no data for training. But strange things happen.
novaRom•4m ago
Maybe it's a "dark pattern" embedded into UI, like what Google does with their Photos app - chances are you or your kids accidentally will click a toggle "Enable Backup", so later your free Gmail will stop working because of "no more space left".
sanex•30m ago
Yeah but how expensive is that vs $20 or 100/month subs?
lukeschlather•8m ago
Yeah, why didn't I think of just spending $30k/month on an inference server and figuring out how to train a 2T parameter model. I clearly don't care about this at all or I would just do that.