CONTACT US
info@bidaiondo.com

Users' private conversations with ChatGPT are encrypted. And despite this, hackers are reading them

     ChatGPT conversations are encrypted, but they do not prevent this type of attack from being carried out

     Google's conversational chatbot, Gemini, is not reached because it uses a different architecture

ChatGPT has become part of the lives of millions of people who use it daily for different tasks ranging from preparing for job interviews to summarizing meetings. But how exposed are your conversations? We have known for some time that OpenAI can use chat content to improve its AI models, unless chat history is disabled or the paid version of ChatGPT Enterprise is used.

The above means that some employees of the company led by Sam Altman have the possibility of accessing your conversations for technical or security purposes. This is why it is so important not to share confidential information, but rather to tell Samsung that it ended up prohibiting the use of ChatGPT among its employees. Beyond this, there are other ways in which conversations can end up in the hands of a third party, for example, a cybercriminal.
The cyberattack that compromises the security of ChatGPT

Imagine that you are in a cafe using ChatGPT from your laptop connected to the public Wi-Fi network. This scenario could be favorable for an attacker to use certain elements within their reach to try to deduce the chatbot's responses. All this, without you realizing it. The information about the attack that we will explain below comes from an interesting study by the Offensive AI Research Laboratory at Ben-Gurion University in Israel that is basically developed in four steps:


     Intercept the victim's traffic
     Filter packets to find ChatGPT responses
     Reveal token length
     Infer ChatGPT response using an LLM

If you are a ChatGPT user, you will surely have noticed that the chatbot progressively sends you the response. We can also explain this process in the following way: the model, GPT-3.5 or GPT-4, transmits the tokens to your computer as it generates them. Now, although this sequential transmission is encrypted, it opens the door to using a type of attack known as Side-channel attack that can reveal the length of the tokens to infer information.

The attacker's challenge at this point is to intercept the data sent between the OpenAI servers and your computer, something that can be achieved with a Man-in-the-Middle attack. Once the malicious actor has compromised network security, they will filter traffic by IP address and analyze packets to detect an incremental pattern in order to discover packets related to ChatGPT responses.

You can then identify the length of the tokens using the packet sizes observed earlier. Here, precisely, the highest level of difficulty occurs: since a token can represent a unit of text as short as a character or as long as a set of words, it is necessary to resort to an additional solution to interpret them and infer the answers. The researchers' solution has been to use an LLM for this task.

We are talking about a specially trained long language model that is capable of analyzing the length of the tokens and predicting the responses generated by ChatGPT quite accurately. The results may vary, but in the tests the model was able to infer 55% of all responses with high precision (the words may change slightly, but the meaning of the sentence slightly). Furthermore, 29% of them had perfect accuracy.

Although this is an attack that requires certain sophisticated elements to execute, it never hurts to keep in mind the extent to which our data can end up being exposed. It should be noted that this technique, according to the researchers, not only works with ChatGPT, but also with other artificial intelligence bots such as Copilot that send the tokens sequentially. Google's Gemini is not reached, precisely because it has a different architecture.

Last news

base_url:
host: www.bidaiondo.com
REQUEST_URI: /noticias/las-conversaciones-privadas-de-los-usuarios-con-chatgpt-estan-encriptadas-y-pese-a-ello-los-hackers-las-estan-leyendo
path: /news/google-proposes-changes-to-the-design-of-search-results-to-avoid-an-eu-antitrust-penalty
Google proposes changes to the design of search results to avoid an EU antitrust penalty.
Google remains in the European Union's crosshairs for its monopolistic business model. On July 7 and 8, the company has a meeting in Brussels with several competitors and the European Commission itself to discuss the proposals the tech giant has...
base_url:
host: www.bidaiondo.com
REQUEST_URI: /noticias/las-conversaciones-privadas-de-los-usuarios-con-chatgpt-estan-encriptadas-y-pese-a-ello-los-hackers-las-estan-leyendo
path: /noticias/epic-games-retira-su-demanda-antimonopolio-contra-samsung-tras-llegar-a-un-acuerdo
Epic Games drops antitrust lawsuit against Samsung after reaching settlement
Epic Games, the developer of video games such as Fortnite, has announced the end of its legal dispute against Samsung. The two companies have reached a settlement, closing the antitrust case initiated in September 2024, which accused Samsung of colla...

online trading systems.

We show you the best way to market products and services online, through a professional service of installation, management and maintenance of your virtual store

We program to suit you

We help you achieve operational excellence in all your business processes, whether they are production, logistics, service or office processes. In addition, we assure you to maintain continuous improvement in your management.

Bidaiondo Articles

How to use social commerce to sell more on social media

Social commerce is the future of online shopping. Today, shoppers can explore, interact, and purchase products directly from their favorite platforms. They no longer need to be redirected to external websites. This barrier-free shopping experience creates more opportunities for brands to connect with their customers. It's especially useful for small businesses and personal brands. Selling through social media combines the power of storytellin...

Ver más »

5 essential skills to be a marketing leader in the digital age

Digital marketing is constantly evolving, and being a marketing leader today requires a set of key skills. Trends change rapidly, and a leader must be able to adapt, innovate, and make strategic decisions to guide their team to success. Training programs such as ESIC's Master in Marketing Management (MMM) help professionals develop these essential skills, preparing them to face the challenges of the digital environment. Below, we explain the...

Ver más »