Yeah, anything that goes trough MS in any way is already use to feed their AI monster, that I have no doubt about.
I use Thunderbird and a private mail server for eveything personal. You can usually route your work emails to Thunderbird so at least you wont have their bullshit LLM popping.
LLMs are little trickster demons. You can put up guard rails, but they’ll happily work around them. You can give pretty granular access on commands they can run, but they’re also good at finding the weird solutions that work to get around them. They do this themselves all the time in beneficial ways, it’s not always inherently bad (I don’t mean thwarting permissions).
The big problem is that the code is non deterministic. Many guard rails are in the non deterministic part. So it’s sort of like politely asking it to not do something, versus making it impossible. Like caution paint on a ledge versus a fence. The issue is that if all the safeguards were in deterministic code, it’d be super hard to get anything done because you’d constantly be manually approving, so people don’t want that, so this is the problem we get.
You can give an LLM admin access to your computer so that it can perform tasks for people. I’m guessing that would allow the LLM to send emails on your behalf.
Do people connect LLM’s to their email accounts? That sounds like the most intrusive thing you can do.
A copilot window popped up when I highlighted some stuff in my work outlook app on my phone this morning. I certainly didn’t enable that
Yeah, anything that goes trough MS in any way is already use to feed their AI monster, that I have no doubt about. I use Thunderbird and a private mail server for eveything personal. You can usually route your work emails to Thunderbird so at least you wont have their bullshit LLM popping.
LLMs are little trickster demons. You can put up guard rails, but they’ll happily work around them. You can give pretty granular access on commands they can run, but they’re also good at finding the weird solutions that work to get around them. They do this themselves all the time in beneficial ways, it’s not always inherently bad (I don’t mean thwarting permissions).
The big problem is that the code is non deterministic. Many guard rails are in the non deterministic part. So it’s sort of like politely asking it to not do something, versus making it impossible. Like caution paint on a ledge versus a fence. The issue is that if all the safeguards were in deterministic code, it’d be super hard to get anything done because you’d constantly be manually approving, so people don’t want that, so this is the problem we get.
You can give an LLM admin access to your computer so that it can perform tasks for people. I’m guessing that would allow the LLM to send emails on your behalf.
Ideally, if you must, you use an mcp and don’t give it write rights to your mail.
People are insane. I bet an eye wateringly high amount of people do this.
It would never occur to me: that this is possible; that it is a wise thing to do.