I took advantage of their "Token Cup" for the world cup and won 530,000 credits. I believe at the time they said it had to be used in the desktop app, which I have installed. Nowhere can I find any sort of balance or evidence of the 530k other than the Token Cup page itself that say that is what I was given.
Their web chat has almost no settings of customization. Everything they present just comes off as amateurish to me. I trust them less than most Chinese AI companies, which a very low bar.
Yea i got about 900k - they have since added a "Gift usage" section under settings/
My Quota
The kimi.com interface also seems to indicate they can be used there (the badge to say its using gift quota is there for me).
However under Usage Details/Gift Quota it seems to indicate that it is consuming it via kimi code and sure enough my usage is reflected there from kimi cli. Odd and a tad vague
I guess the better question would be if you are under and NDA and using an online model, are you already violating it but does this violate it further?
Google Workspaces and Dropbox have an IL5-compliant offering, which means they attest that they will not do exactly this (and are audited on that). Not sure about iCloud and Notion.
Your NDAs prohibit emailing a colleague about the e.g. project, or discussing it in a Slack DM with the client, or tracking progress on it in JIRA? You have to do NDA’d work exclusively with local tools or end-to-end encryption? Those are some difficult NDAs!
We use inhouse on-premises email, issue tracking, and messaging. Depending on the project, external communication does require E2EE email. Development happens on local hardware and software unless required otherwise by the customer.
I’m pretty sure (even just based on the revenue of various SaaS products) that’s not typical, hence “most NDAs”. I’m also sure some require a SCIF, but that’s not most of them.
No this is still the level below needing a SCIF. The USG really tightened this stuff up in the 2010s and highly restricts what you can do with CUI. That's why there's a whole parallel FedRamp-compliant cloud ecosystem.
But in terms of how common it is, pretty much everybody in Fairfax County works in a company with rules like this; it's a big part of why the tech culture is so different than Austin or SFO.
Oh Lord yes. We have very specific communications channels we're allowed to use about any of our sensitive products, and that's only the unclassified stuff (classified is obviously its own, stricter, beast).
That 10 minutes is likely very normal. Possibly...
* A Google employee messes up a setting (like one of the previous incidents) triggers something that looks like a suspension is warranted and it takes 10 minutes to flow through the process to suspend.
* A Railway customer does something corrupt, or seemingly corrupt, Google's system starts limiting access and take 10 minutes to decide it should be a suspension.
These are even more likely if there is a person in the loop to approve, who obvious did not dig deep enough to see that they should not have done so.
Their web chat has almost no settings of customization. Everything they present just comes off as amateurish to me. I trust them less than most Chinese AI companies, which a very low bar.