TYMI Community Network

What actual f*ck @DarioAmodei / @boris / @TheAmolAvasare Let me get this straight - I get this email telling me: 1. A cybersecurity "research" company gets into your internal systems while... *checks notes* "conducting a security testing exercise on its own initiative and without our authorisation" 2. You "cannot confirm whether any particular person’s information was viewed," then in the same email say "we have no reason to believe you are at heightened risk." 3. You also try to reassure by saying "the cybersecurity firm has certified in writing that it has deleted the accessed data and will not use it." Translation - they pinky promised they deleted everything they gained unauthorised access to. I've been hacking companies for 15+ years, so let me spell it out. Accessing systems without authorisation has a name -hacking. Calling it a "security testing exercise" doesn't change that. Honestly, the access itself doesn't bother me much. The irony does. I’ve spent over $50k on API credits in the last six months and contributing to CVP by accepting logging. On top of that, I've reached out to your teams to collaborate on security research (actual research - not the kind that has you send out privacy notices to your customers) and heard nothing. I'm getting deeply unserious security vibes and considering moving all my (and my clients) token spend to @OpenAI if I don't see material change here.