c.im is one of the many independent Mastodon servers you can use to participate in the fediverse.
C.IM is a general, mainly English-speaking Mastodon instance.

Server stats:

2.9K
active users

#box

6 posts5 participants0 posts today

I'm now pretty convinced that box AI does (at least sometime) leak information.

A copy of the two chats and my test file is at mvpa.blogspot.com/2025/03/fun-

Evidence: in session 1 with a file I told box AI that the "white" subjects were "silly" and that the ages were given in days. In session 2 (four days later, different computer, different network) I started a new box AI session with the file, and it answered "how old are the silly subjects in years?" with the "white" subject ID codes, and converted the ages from days to years without being given those details again.

The box AI chats do not reproduce exactly every time, even with the same questions about the same file. But that it ever "remembered" things like "silly = white" across sessions (and users, in tests with colleagues) is deeply concerning in my context of protecting participant privacy.

mvpa.blogspot.com"fun" with Box AI information leakageOur university IT folks encourage employees to use their box account for data storage, including of sensitive (human subjects research data,...
#box#AI#boxAI

Merci-Boxen

Die Migros hatte Anfang Jahr eine Jubiläumsaktion, um der Kundschaft für die Treue während der vergangenen hundert Jahre Danke zu sagen: Man konnte Kleber sammeln – pro 20 Franken Einkauf einen. Für 20 Kleber gab es eine Box. Man rechne.

Diese Schachteln enthielten jeweils verschiedene Migros-Produkte: Zum Beispiel einen Eistee, ein Abwaschmittel, Konfitüre, Pasta, einen grossen Sack mit Sonnenblumenkernen gar. Je nach Box.

Offenbar waren die Boxen im Aktionszeitraum – wegen des doch recht hohen Preises? – nicht ganz so zügig und vollständig weggegangen, wie sich das die Marketing-Abteilung wohl gedacht hatte. Jedenfalls hatte es letzten Samstag in meiner „Heim-Filiale“ noch etwa zwei Paletten mit solchen Schachteln. Statt sie einzustampfen oder auseinanderzunehmen und alles einzeln zu verscherbeln oder zu verschenken – was weiss ich -, bekam jeder Kunde und jede Kundin einfach so eine Merci-Box geschenkt: ohne zu kleben, ohne zu sammeln.

Merci, Migros!

Here's an update on my attempt to determine how concerned to be about the privacy and security of our data now that my employer added Box AI.

I'm most worried about information "leaking" from one AI session to another, so decided to test for that. Spoiler: info did seem to be retained over time and users.

For the tests I used a text file with an interview_age column in months, though that it's months isn't given in the document.

In the first box AI chat, when I asked "how old are the participants in years?", as expected, it reported the values as given in the interview_age column (e.g., that one participant was 458 years old). I then told the AI that "the ages in the
document are in months. how old are they in years?", after which it (reasonably) divided by 12 to convert.

The test was whether, in later sessions, box AI would "remember" that the age column was in months and report the age in years after dividing by 12 without being told to do so.

In our tests, that is what happened: the box AI usually converted the ages correctly first try in later sessions, both when I queried the same document from different computers (my wustl.box account but on different days and networks), and when two colleagues opened their first AI session with a newly-shared copy of the document.

It'll be interesting to hear what our IT folks think, but I am getting less and less confident in box for sensitive data.

#box#boxAI#AI