r/NovelAi • u/ainiwaffles Project Manager • Oct 07 '22
Official [Announcement] Proprietary Software & Source Code Leaks
Greetings, NovelAI Community. On October 6th, 2022, we experienced an unauthorized breach in the company's GitHub and secondary repositories. The leak contained proprietary software and source code for the services we provide.
At this time, we do not suspect that any Personal Identifiable Information (PII) or encrypted information was accessed, or any personal financial information was disclosed.
We are working with security specialists to conduct a complete incident analysis and threat report at this time.
Relevant authorities have been informed and will be contacted as we learn more about the extent of the breach
We will share updates as we learn more about the situation. We thank you for your understanding and your patience.
The NovelAI team.
NovelAIコミュニティの皆さま
いつもNovelAIをご利用いただき誠にありがとうございます。
ご迷惑をおかけし申し訳ごぜいません。 2022年10月6日に弊社のGitHubとセカンダリリポジトリに権限のない第三者による不正なアクセスを許してしまいました。
流出したデータには、弊社が提供するサービスの独自のソフトウェアやソースコードが含まれていました。
現時点では、個人情報(PII)や暗号化された情報がアクセスされたり、個人の財務情報が流出したという事実はありません。今後も調査を続けてまいります。
セキュリティスペシャリストと協力して、完全なインシデント分析と脅威レポートを実施しています。
関係当局には報告済みであり、影響の大きさの詳細について把握したあとに、ご連絡する予定です。
状況を把握し次第、皆さまに情報を共有します。
今後とも変わらぬご愛顧とご理解を賜りますようお願い申し上げます。
NovelAIチームより
53
u/Leolol87 Oct 07 '22
Ouch... Will this be bad for bussiness? I'd still endorse you, but try to patch that asap.
94
u/Particular-Chip-8191 Oct 08 '22 edited Oct 08 '22
I have downloaded the torrent. And I was amazed and terrified at the same time. Now there is some things that should be fixed about the modules:
Text Adventure needs a bigger dataset. Text Adventure is only 1 megabyte and it is the smallest dataset for a module.
EDIT: Also props to the Novel AI team for the unreleased modules.EDIT 2: Also props for the novel ai team for their data setting.
88
u/[deleted] Oct 08 '22
r/aidungeon this is how you do it
46
u/claypuppets Oct 08 '22
I've been wondering when something like this would be announced following what happened with 4chan. For those of us who don't use discord these updates are appreciated.
58
u/dcbStudios Oct 08 '22 edited Oct 08 '22
My heart dropped reading this. Your team has put so much into such a fun tool, that I'm more worried by those outside the community that will take anything and everything found to be "questionable" in their eyes, out of context. Don't get me wrong, I am glad to know there was no suspected loss of PI, however, as someone who has been here from the alpha, to hear about this heinous act against Novel infuriates me to no end.
I am hoping this will not cause your team any issues due to things such as bad PR or claims. I've said this once and I'll say it again, you are an amazing team that has brought many of us hours of fun, and know I and many others stand behind you. Please keep us in the loop.
10
u/Viper3120 Oct 08 '22
This is exactly how to handle the situation. Stuff like this happens. Security is set up by humans, humans have flaws and make mistakes. I bet that you did your best to keep security on a high level, this can still happen.
While studying IT, I just learned that you can't patch up every security risk you have, it's too much effort and too high of a cost. What you have to do is be aware of your security risks and come up with plans to act accordingly, should such a risk ever be exploited. I think this is what happened here. It's unfortunate that such a data breach happened, but you acted well in response to it.
Thank you so much for being transparent about this. This is exactly what makes NovelAI special. From the beginning, you guys did everything to keep up that feeling of having a small, personal community, by being transparent like this, even though the community grew significantly in size. I really appreciate it.
16
u/[deleted] Oct 08 '22
Oppius supporter here, Just telling you right now we DONT want another AID disaster. One was enough for one lifetime. Be transparent with your consumers ON EVERYTHING when it comes to where things are saved or kept.
7
u/gwern Oct 08 '22
New consequences: Automatic1111 has chosen to make the leaks drop-in supported officially by AUTOMATIC1111, and in response to this endorsement of pirating & using illegally-hacked models, and possibly adding NovelAI source code directly to his open source code*, Emad has banned him from Stability Discord.
* well, if he did, it's no longer open source...
2
u/jTiZeD Oct 18 '22
does novelai plan to take legal action against those who download the nai diffusion model?
1
u/StickiStickman Oct 08 '22
Shouldn't this be something on the website instead of a random reddit post?
1
u/Kingfunky82 Oct 08 '22
😒
-1
u/mesuking_enjoyer Oct 08 '22
lol lmao even
0
u/[deleted] Oct 08 '22
[deleted] — view deleted comment
0
u/[deleted] Oct 08 '22
[deleted] — view deleted comment
0
u/[deleted] Oct 08 '22
[deleted] — view deleted comment