04 May 2022 09:34, UTC.
Reading time: ~2 m
OpenAI’s Copilot code-writing AI assistant can offer private keys from real cryptocurrency wallets. The Register writes about it.
According to one developer, Copilot suddenly offered something resembling a private key to a cryptocurrency wallet. It turned out to be linked to a real account.
“I was shocked. A locked key is like a lock in your treasury: if it gets leaked, your assets can be stolen,” said the programmer.
Another developer suggested that Copilot extracted information from open GitHub repositories. The AI assistant memorized the publicly available data and brought “it to the surface when properly queried,” he added.
Apparently, the private key did appear in publicly available GitHub repositories. Programmers have suggested that it was created for testing purposes. The wallet is active and was used to send and receive real tokens.
Some developers also managed to find private keys. They turned out to be associated with other cryptocurrencies, some of which contained a small amount of money.
Former OpenAI researcher Ari Herbert-Voss suggested that the keys were leaked because they were stored in the public domain.
“People are thrilled that this is another way to find wallets to leak, but note, they were all in the public domain anyway,” he said.
Herbert-Voss suggested that potentially valuable accounts had already been emptied.
“The real risk is that someone is not paying attention and continues to use a compromised wallet,” he added.
Earlier, OpenAI said it would add a personal information filter to Copilot that would exclude personal information like phone numbers and home addresses from training kits.
As a reminder, GitHub introduced the Copilot code autocomplete tool in June 2021. The assistant was created in collaboration with OpenAI, based on the Codex language model.
In July, the tool was suspected of copying copyrighted code snippets.
In October, researchers found that 30% of new code on GitHub was written with Copilot.
#Artificial #intelligence #leaked #cryptocurrency #keys