News for hackers. Stuff that matters.
Re:Copilot regurgitating Quake code, including sweary comments by buu700 on Friday July 02, 2021 @10:05AM (#27711667)
I'm not firmly for or against the concept of Copilot, but it's fascinating to me that it will introduce an entirely new class of bugs. Rather than specific mistakes in certain blocks of code and edge case errors in handling certain inputs, now we're going to have lazy/overworked/junior developers getting complacent and committing code they haven't reviewed that isn't even close to their intent. Like you could have a backend method that was supposed to run a database query, but instead it sends the content of an arbitrary variable in a POST request to a third-party API or invokes a shell to run `rm -rf /`.
Re:Copilot regurgitating Quake code, including sweary comments by marcosdumay on Friday July 02, 2021 @12:09PM (#27713344)
To me, the most interesting aspect is the new class of supply chain security vulnerabilities it will create. How people will act to exploit or protect¹ against those will be very interesting.

1 - I don't expect "not using a tool that generates bad code" to be the top option.