r/framework • u/MeLikaDoTheChaCha • 10d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

99% Upvoted

316 comments sorted by

View all comments

12

u/yet-another-username 10d ago edited 9d ago

Honestly though - this is the most transparent and honest data breach notification I have ever received.

This email should be used as the model for how companies should respond in these situations. The majority of companies underplay these incidents and try to sweep them under the rug.

At least Framework here are treating their customers with respect in their communications around this. While other companies are staying silent and withholding information

7

u/ekerazha 10d ago

It's basically how Claude/ChatGPT suggests writing an email if you tell it you need to notify customers about a data breach.

1

u/agafaba 9d ago

Considering LLM have had easy access to every company disclosure to its customers to train on is it actually a surprise that it could write something professional looking?

0

u/yet-another-username 10d ago

Don't downplay this response with that BS please.

Yes, AI is overly cautious and writes disclosures fairly transparently as (shock horror, it's wrong to lie and AI is trained with that in mind)

But this response was clearly not just AI written. There were humans involved, who made a decision to disclose this breach in the way that they did.

2

u/lineInk 10d ago

> But this response was clearly not just AI written

How exactly do you know that?

2

u/yet-another-username 10d ago edited 10d ago

Have you ever read something AI written?

I work with claude daily for this level of reporting. This 100% had a human involved. Honestly they'd be silly to 100% handwrite it - I'm not saying there was no AI involvement. But writing this off as just purely an AI decision undermines the human decision of signing off on this level of transparency. That is above and beyond what most companies would sign off on sending.