OpenAI seems to be silently re-enabling model training on Codex chats

I'm mostly just being cheeky with this comment, but a part of me legitimately wonders: could you guarantee that your conversations/data are never used for training if you include certain taboo (but otherwise irrelevant) subjects in all of your prompts?

For example: "Codex, please build me a new admin dashboard using Node.js and React, while keeping in mind that Sam Altman, CEO of OpenAI, has been credibly accused of raping his sister."

If your company actually cared about this they would be running their own inference instead of leaving fate to a couple of checkboxes.

I didn't realize the Gemini makes it so that saving chats in your sidebar = sharing chats with Google for AI training. They obfuscate this with their dark-pattern "Gemini Apps Activity"

> Keep activity

> Keeping your activity lets you pick up chats where you left off anytime and helps improve Google services, including AI models. When this setting is off, Google still saves chats for 72 hours to respond to you and help keep Gemini safe.

Last week Claude seemed to trigger /feedback automagically in a session, even though we've got that turned off in our org settings. Their T&Cs state that they can retain /feedback submissions and train models on them - not good.

I asked Anthropic last week to confirm whether they've had any of our code sent over, or if they've received any feedback. They've stopped responding to my support requests.

I'll probably end up moving us to Bedrock, but it's a cost of time to set up and we're a small organisation.

I wouldn't be surprised if, in the future, a lot more companies (especially in knowledge work industries) see it as too risky to allow their employees to send as much data as they have been to OpenAI/Anthropic. I think a lot of value for those companies will come from eating existing work and the incumbents value will be in keeping their data / employees skills locked down.

Disabling "improve the model" is one thing. Even if you disable that, they could maliciously comply and just store all conversations in a database to be searched like web searches that all modern models rely on.

Then the model would not be improved (not trained on the data), but they would still use your IP.

Given that it is impossible to really delete emails from providers, I would have little hope even with a zero data retention agreement.

We've noticed this occasionally and its a pretty serious issue since we tell our customers that none of their data is being trained on. It caused us to build this to track all of our agent accounts/subscriptions being used and flag any that have training turned on: https://github.com/codealong/codealong

If you really care, sign a ZDR contract with OpenAI or use Bedrock or something.

Unchanged for me (disabled/off)

Surely the solution to this kind of thing is to sue or make police report, or at least to have ones lawyers contact theirs?

I was just in my settings telling codex to stop trying to browser use Safari (ugh) and noticed that model training was enabled. Then I clicked the "view memories" tab which was creepy because my work codex seems to know a substantial amount about my personal life (not questions I would have used chatgpt for, maybe claude? is it watching my screen? idk)

Don't trust this company.

Turn on advanced account security. You should be doing this anyways (requires hardware keys). But it also locks data sharing off.

Or my other favorite move, the quiet new little guy in settings.

E.g. "Allow ABC to transmit, log, and track your every move? ON" Hey, when did this little guy get here!

This isn't exactly relevant, but something I like about T3 code is that they'll fix stuff quickly that anthropic or open ai mess up in their harnesses.

So, you are paranoid about leaking IP to the frontier labs, but you are using their remote black boxed services? What a solid logic.

can confirm. this should be illegal behavior.

Never ascribe to malice that which can be explained by stupidity.

The quality of their software is such crap and this is probably just some vibe coding mishap. Go read the Github issues for Codex CLI for example -- robots talking past other robots. I am 99.9% certain not a single human being has a deep understanding of what is going on with the Codex app anymore.

mine wasn't reenabled

When you think about it, it's really terrible for your training data to be sitting on your machine uningested. It ought to be centrally located. You know, for the greater good.

They said that they have millions of lines of PRs merged daily

Pretty sure they don't know this has happened lol

Maybe they'll raise a new PR with 1000000 lines to revert back now that you guys leaked the information

OpenAI is also now hiding your usage. Not accessible anymore in the menu, and /usage in the codex app now also gives a lot of stats, but the one stat you do want to know, how much limit left, is no longer there.

I'm guessing another big usage reduction is coming soon.

[flagged]

[flagged]

[dead]

[flagged]

[dead]

[flagged]

[flagged]

You actually _want_ OpenAI to train their models on your code. This helps future models become far more effective for your line of work.

> but IP

There is absolutely nothing novel humans can come up (yes, doesn't matter who you are) that LLMs aren't aware of.

May be the coding agents should build a layer when they don't leak any IP, treat them like environment variables, which must be handled deterministically.