Remove B2B Remove Data collection Remove Passwords Remove Risk
article thumbnail

Fixing Data Breaches Part 2: Data Ownership & Minimisation

Troy Hunt

Data Collection Should be Minimised, Not Maximisation. HIBP only needs an email address because that's all I'm looking for when someone appears in a data breach. Report URI needs a password as well because you need to be able to login. We don't even collect a name on either of those services because what good would it do?

article thumbnail

ChatGPT at work: how chatbots help employees, but threaten business

SecureList

Given that LLMs are prone to so-called unintended memorization (memorizing unique sequences like phone numbers that do not improve the quality of the model, but create privacy risks) data that ends up in the training corpus can then be accidentally or intentionally extracted from the model by other users. Malicious client.