News for hackers. Stuff that matters.
Re:GitHub Copi­lot inves­ti­ga­tion by woah on Monday October 17, 2022 @10:49PM (#33242419)
It would be sad if someone succeeded in shutting down CoPilot for this kind of copyright stuff. It is genuinely useful. I don't care that it reproduces copyrighted content. The only way you can get it to do that is to bait it with the function names of functions that have already been copy and pasted thousands of times onto GitHub without proper licenses.

Luckily, someone will probably come out with a "renegade" version trained on whatever makes it a useful assistant to my coding. I won't be afraid of accidently violating copyright myself, because I won't be trying to bait it into reproducing heavily copy&pasted cherrypicked examples, and I won't use 20 lines of its output with zero modification.

Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Monday October 17, 2022 @11:03PM (#33242490)
> It would be sad if someone succeeded in shutting down CoPilot for this kind of copyright stuff. It is genuinely useful. I don't care that it reproduces copyrighted content.

Sure — in the same way that hacking into a competitor's GitHub account and copying their private source code is "genuinely useful" to you. As the person benefitting from unlawfully using their source code, of course you wouldn't care that it reproduces it. But you're not really the person we're trying to help here.

Re:GitHub Copi­lot inves­ti­ga­tion by dmix on Monday October 17, 2022 @11:17PM (#33242573)
> in the same way that hacking into a competitor's GitHub account

That's like comparing grand-theft auto to someone stealing a pack of gum from a convenience store. It's not a useful analogy. The latter is still a problem, but we don't need to be FUDy about it.

And OPs right, this will keep happening until we come up with better ways of solving this problem.

Whether that's educating companies on the legal (and moral) risks their developers IDE tools are exposing them to, to better licensing database/indexing, working with future OSS devs building these tools instead of treating them like criminals, suing the for-profit companies like Microsoft who seek to profit from this until they invest in this problem, etc.

Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Monday October 17, 2022 @11:46PM (#33242737)
OP can correct me if I'm wrong, but they don't seem particularly interested in solving anything. They literally said "I don't care that it reproduces copyrighted content." So the problem, as I see it, is the people who see the laundering of open source and proprietary code as a draw, rather than a drawback.
Re:GitHub Copi­lot inves­ti­ga­tion by nearbuy on Tuesday October 18, 2022 @12:25AM (#33242966)
OP said they don't care that it can reproduce copyrighted content because they're not going to do so with it. That's roughly the opposite of what you're implying.
Re:GitHub Copi­lot inves­ti­ga­tion by smaudet on Tuesday October 18, 2022 @01:12AM (#33243207)
No they are just going to let other people commit crimes and claim they will never do it...

Do you really believe Microsoft employees aren't going to be using this, illegally or unofficially?

"Yes! We (Microsoft) aren't doing anything illegal, but we are going to turn a blind eye to everyone using it illegally as we directly benefit from it - and here's the kicker! Our employees are legally liable not us evil laughter all the way to the bank"

Of course the legal execs aren't using it, this is classic Microsoft (Embrace, Extend, Extinguish).

Re:GitHub Copi­lot inves­ti­ga­tion by Ajedi32 on Tuesday October 18, 2022 @11:22AM (#33248701)
If accidental reproduction of copyrighted material by AI systems is illegal under current law then we should change the law immediately so that it's not.

These AI systems are highly novel, transformative, and useful. Their development is exactly the sort of thing copyright law was originally created to encourage. If it's hindering them instead, that's a problem.

(And no, I'm not saying people should be allowed to use AI to intentionally launder stolen code; use some common sense here.)

Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Tuesday October 18, 2022 @04:15PM (#33253247)
Why is it so outlandish to expect the people who make money by selling AI systems to only train them using material for which they have a license?

As many commenters have pointed out, no one would have a problem had Microsoft trained Copilot on the Windows source code. The fact that they intentionally left it out of the training set is a huge red flag.

Re:GitHub Copi­lot inves­ti­ga­tion by Ajedi32 on Tuesday October 18, 2022 @05:12PM (#33254058)
Because AI systems require large amounts of training data, the more the better, and requiring manual review of those datasets to ensure compliance with copyright would consume significant resources and slow down the pace of innovation across the entire AI industry.

Now let me flip that question around on you: What benefit would society gain from that forcing AI developers to do all that extra work?

Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Tuesday October 18, 2022 @06:21PM (#33254828)
The benefit is that our collective genius isn’t mined by mega corps and rented back to us. That we exist as more than mindless resources to be tapped for profit.
Re:GitHub Copi­lot inves­ti­ga­tion by Ajedi32 on Wednesday October 19, 2022 @09:38AM (#33261943)
> The benefit is that our collective genius isn’t mined by mega corps and rented back to us.

That sounds like a downside to me, not a benefit. You're basically arguing Copilot, Stable Diffusion, GPT-3, etc (which were all trained on copyrighted works) not existing would be a better situation than them existing. I'm just not seeing that.

Re:GitHub Copi­lot inves­ti­ga­tion by im3w1l on Wednesday October 19, 2022 @08:16PM (#33269410)
If you are going to use my work for free and without attribution and turn it around to compete with me, then it decreases my incentive to produce anything, and if I do it decreases my incentive to publish it. This goes directly against the intentions behind copyright law.
Re:GitHub Copi­lot inves­ti­ga­tion by Ajedi32 on Friday October 21, 2022 @10:43AM (#33288493)
That's the best argument I've heard so far, but still doesn't make sense to me. It's not like your individual project is going to make any significant difference to the capabilities of the resulting AI that's "competing with you" one way or the other. So really all you'd be doing by not releasing your code is shooting yourself in the foot for no gain.

Granted, people are not necessarily rational actors, so maybe you could argue it still makes sense to have some protections in place to assuage people's irrational fears. Maybe like some kind of robots.txt for determining whether a page can be used in an AI dataset could serve that purpose. I'd be hesitant to support anything more burdensome than that.

Re:GitHub Copi­lot inves­ti­ga­tion by nearbuy on Tuesday October 18, 2022 @05:23PM (#33254199)
They are only using material for which they have a license (at least debatably). Open source software licenses usually require attribution if you reproduce the source code or use the source code in a program.

Some other uses are allowed without attribution. Someone can read and learn from open source software without needing to put an attribution anywhere. You could run an analysis of the code on GitHub to find out what percent of code is written in C++. You wouldn't need to attribute every project on GitHub.

Now the debate is whether this applies to training ML models.

Re:GitHub Copi­lot inves­ti­ga­tion by comex on Tuesday October 18, 2022 @12:14AM (#33242890)
Not sure if they edited their comment, but the end of it contradicts your interpretation:

> I won't be afraid of accidently violating copyright myself, because I won't be trying to bait it into reproducing heavily copy&pasted cherrypicked examples, and I won't use 20 lines of its output with zero modification.

Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Tuesday October 18, 2022 @12:18AM (#33242920)
No, that was there, but it doesn’t contradict my interpretation. Copyright doesn’t only cover reproducing code verbatim. It also includes derivative works.
Re:GitHub Copi­lot inves­ti­ga­tion by dmix on Tuesday October 18, 2022 @12:51AM (#33243099)
Maybe in court which interprets software dev very strictly, but in practice a developer automatically copying a single function from some 'freemium' style licensed library [1] posted publicly on Github - getting autocompleted into a different codebase with many thousands of lines of custom code isn't the same as going into some proprietary codebase and stealing their code to compete / build the same product as another company.

We could come up with scenarios where there might be some fancy algorithms posted on some public Git repo that's super efficient or unique, and that somehow fits into the size of individual functions that could be auto-inserted into some other person's codebase. But IRL that sort of thing is rarely ever going to be the thing that these IDE tools do. At least in a way that meaningfully contributes to another project.

That is still a concern yes, but it's still a niche usecase, which doesn't justify killing off otherwise extremely useful tools.

Maybe I'm being too techno-libertarian here, but I believe existing courts + public feedback cycles + iterating on how the public code is consumed by these tools + spreading awareness of the issue is enough to address the licensing problems.

The more accurately we explain the problem, the quicker we'll find good solutions.

[1] usually licensing saying commercial projects need to either pay or not use it at all. Or some attribution clause

Re:GitHub Copi­lot inves­ti­ga­tion by smaudet on Tuesday October 18, 2022 @01:16AM (#33243228)
"Maybe I'm being too techno-libertarian here, but I believe existing courts + public feedback cycles + iterating on how the public code is consumed + spreading awareness of the issue is enough to address the licensing problems."

I think you are, though. You have to automate the justice as well, traditional courts can't keep pace. You'll just end up with more automated DMCA-style takedowns, not less.

Re:GitHub Copi­lot inves­ti­ga­tion by dmix on Tuesday October 18, 2022 @01:25AM (#33243269)
I think you misunderstood my comment then (or how these tools work IRL)... because I'm not saying that it's even worthy of a court case in the vast majority of cases. So why would you need to automate such a thing?

And I don't even see how an automated DMCA system could exist because I doubt they'd win monetary damages in court over a 'stolen' function or two (or detect it in most commercial applications in the first place).

Regardless a single class action should be enough to make Microsoft either shut down their project or adapt (via whistleblowers, leaked code, public repos, etc). And regardless if they don't adapt by investing in the possible solutions here, an OSS project could take it's place eventually and the courts wouldn't even be a useful solution.

Ideally a capital-backed company will help solve this, with the obvious legal incentives that already exist. But even if it doesn't this isn't going away.

Re:GitHub Copi­lot inves­ti­ga­tion by SantalBlush on Monday October 17, 2022 @11:57PM (#33242798)
>That's like comparing grand-theft auto to someone stealing a pack of gum from a convenience store.

They're both more like grand-theft auto, but one involves the valet driver leaving with your car, and the other involves smashing a window.

Re:GitHub Copi­lot inves­ti­ga­tion by oefrha on Monday October 17, 2022 @11:28PM (#33242632)
I use Copilot all the time and I’ve never once used it to generate a whole prepackaged function that’s more than maybe three lines. So no, I don’t benefit from its reproducing other people’s code at all. Tell me you don’t use Copilot without telling me about it.
Re:GitHub Copi­lot inves­ti­ga­tion by remram on Monday October 17, 2022 @11:37PM (#33242681)
> Tell me you don’t use Copilot without telling me about it.

You don't accept arguments against the use of Copilot from people unless they... use it?

That's a nifty way to ignore any and all criticism of Copilot, or indeed any discussion about any ethical issue ever.

Re:GitHub Copi­lot inves­ti­ga­tion by oefrha on Monday October 17, 2022 @11:38PM (#33242690)
They should at least try to understand how it’s actually used, not imagining how it’s simply used to steal their largely replaceable code.
Re:GitHub Copi­lot inves­ti­ga­tion by xigoi on Tuesday October 18, 2022 @01:05AM (#33243176)
It doesn't matter how it's used. Do you think Microsoft would be happy with someone training a model on Windows source code, as long as they didn't use it to reproduce the code?
Re:GitHub Copi­lot inves­ti­ga­tion by sangnoir on Tuesday October 18, 2022 @02:44AM (#33243786)
If Microsoft were confident Copilot doesn't produce infringing code, they would have included the Windows and Office codebases in the training data. I wonder what will come out of discovery
Re:GitHub Copi­lot inves­ti­ga­tion by manmal on Tuesday October 18, 2022 @03:14AM (#33244005)
You think MS‘ code quality is high enough to train an AI on?
Re:GitHub Copi­lot inves­ti­ga­tion by AlexandrB on Tuesday October 18, 2022 @11:59AM (#33249432)
Do you think they audited every open source code base that was used in training for quality?
Re:GitHub Copi­lot inves­ti­ga­tion by batmanturkey on Tuesday October 18, 2022 @06:31AM (#33245264)
“Their largely replaceable code”

Smells like: “ I stole this lousy apple that wasn’t any good” Then why did you steal it?

Put your money where your mouth is, Microsoft, train copilot on your own code!!!

Don’t wanna train it with windows 11 code? Prefer to hijack others projects and use their for your needs and then pretend thst insulting others and calling their code worthless will get you off the hook????

Backfire

Re:GitHub Copi­lot inves­ti­ga­tion by woah on Wednesday October 19, 2022 @04:58PM (#33267858)
> Smells like: “ I stole this lousy apple that wasn’t any good” Then why did you steal it?

The lousy code trained copilot in what a switch statement looks like so it can autocomplete mine for me

Re:GitHub Copi­lot inves­ti­ga­tion by tablespoon on Tuesday October 18, 2022 @12:04AM (#33242834)
>> Tell me you don’t use Copilot without telling me about it.

> You don't accept arguments against the use of Copilot from people unless they... use it?

> That's a nifty way to ignore any and all criticism of Copilot, or indeed any discussion about any ethical issue ever.

"I only listen to people who agree with me, but to make that sound legitimate, I have a somewhat indirect way of saying so."

Re:GitHub Copi­lot inves­ti­ga­tion by cdrini on Tuesday October 18, 2022 @01:44AM (#33243402)
I believe the argument is that you shouldn't accept arguments against the use of copilot from people unless they have tried to use it. In a realistic context. That seems reasonable to me. It's the bare minimum to make an informed opinion. I think the wording was perhaps poor, but I think your interpretation is a little reductive/disingenuous.
Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Tuesday October 18, 2022 @03:39AM (#33244176)
I don't see how using copilot make the copyright question any less serious.

Because it's useful, then it's not a problem?

Well, it's also useful to send our non recyclable trash to 3rd world countries and every 1st World country should try it. It will definitely make the consequences less serious if everyone does it.

Not apples to apples but I guess you get the picture.

Re:GitHub Copi­lot inves­ti­ga­tion by concordDance on Tuesday October 18, 2022 @03:57AM (#33244296)
Because its a net good to the world its not a problem. It the benefit is orders of magnitude greater than the harm then its good.
Re:GitHub Copi­lot inves­ti­ga­tion by batmanturkey on Tuesday October 18, 2022 @06:27AM (#33245240)
It’s a net harm for the programmers whose code is being willfully plagiarized.

It’s a net boon for Microsoft in their efforts to rule the world.

It’s a net loss for society and ethics.

Open up copilot code, Microsoft, if you are so sure that everyone must wear transparent underwear let’s see you wearing some. Train copilot on windows 11 code. It’s not public domain.

Truth matters. Lies matter

Re:GitHub Copi­lot inves­ti­ga­tion by onethought on Tuesday October 18, 2022 @06:50AM (#33245404)
Expand on the unethical part. So people published code that could be referenced and copied on GitHub. There was no ethical problem, the world, society were happy.

Github make a convenient way to search and contextualise this publicly available code and paste it into your code (adjusting local scope, format, language along the way). Suddenly we have crossed an ethical line!?

Which ethical line? Are you pretending people never copy and pasted open source code before copilot? Are you pretending open source code never copy and pasted other open source code? That we were in an ethically pure world until copilot came along?

Re:GitHub Copi­lot inves­ti­ga­tion by shuger on Tuesday October 18, 2022 @07:53AM (#33245896)
> So people published code that could be referenced and copied on GitHub. There was no ethical problem, the world, society were happy.

This code has different licenses. You can't just copy code randomly without checking license first.

Copilot serves it stripped of the license to unaware users. Even if copilot user wants only to reuse code licensed in a way that allows it copilot will serve him code from restrictive licenses without him being aware.

Re:GitHub Copi­lot inves­ti­ga­tion by onethought on Wednesday October 19, 2022 @03:56PM (#33267203)
You can just copy and paste code without checking the license. People do it all the time.

GitHub doesn’t force you to accept the license in the repository before showing you the code.

Re:GitHub Copi­lot inves­ti­ga­tion by concordDance on Tuesday October 18, 2022 @08:06AM (#33245991)
> It’s a net harm for the programmers whose code is being willfully plagiarized.

What's the harm, specifically?

Say it copies that snippet of workflow scheduling code I made at work yesterday or the greasemonkey script I made in my own time.

How is my life worse?

Re:GitHub Copi­lot inves­ti­ga­tion by cdrini on Tuesday October 18, 2022 @04:44AM (#33244588)
I believe the argument being made is that in _actual, real-world_ use of copilot, no copyright infringement happens. In order to make an informed decision as to whether you agree with that, you can try copilot to reach an informed conclusion. There is no cost to try it. Unlike your example, where "trying" has an immediate cost -- which is why that example doesn't make too much sense here.
Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Wednesday October 19, 2022 @03:34AM (#33258866)
Yep know it's much more clear, thanks for clarifying.

See your sister comment's child for my reply.

Re:GitHub Copi­lot inves­ti­ga­tion by imdsm on Tuesday October 18, 2022 @04:58AM (#33244687)
As someone who has used copilot since the early beta days, what I think people are saying is that nobody uses Copilot to generate full functions like this. It's more of an intelligent auto complete. It's fantastic for repetitive autocomplete where certain things have to be changed, and for quickly getting out boilerplate code. You can put a list in a comment along with a format and generate data structures quickly and easily. You can solve small problems quickly, allowing you to focus on the bigger picture.

It's sort of like a power tool — sure, you could use a screwdriver, but a drill with a screwdriver attachment will be quicker. Hammers are good, nail guns are quicker. You'd never expect someone to use a drill with sd attachment if they'd never used a screwdriver before.

There are for sure things to be improved, such as the recent post on how you could put in a very specific seed and get out a specific function that it shouldn't. The answer here isn't to shut down the project, at a net loss for everyone, but to find ways to improve it.

As others have said, with Copilot gone and the new demand created, the vacuum will bring in community projects that will happily scrape every public repository they can get their hands on.

Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Wednesday October 19, 2022 @03:33AM (#33258859)
Now I understand what you mean, still pretty crappy because those minor auto complete strings only exist because Microsoft used code without permission and/or without crediting the original owners and/or breaking licenses from the original corpus.

I use copilot everyday, I love it, but it still leaves a bad taste in my mouth knowing that people out there worked really hard on their code and harder on building OSS licences just for Microsoft to throw all that out of the window.

Feels like licenses don't matter anymore. My own code doesn't matter much, but it's about principals dude, licenses are there and they should be respected, if not, then it's just anarchy, and we all know anarchy only works in very specific scenarios, Microsoft is not apart of any of those scenarios.

Re:GitHub Copi­lot inves­ti­ga­tion by gizzlon on Tuesday October 18, 2022 @03:57AM (#33244294)
> I believe the argument is that you shouldn't accept arguments against the use of copilot from people unless they have tried to use it.

I disagree, and this does not hold up generally: We can, and should, argue things we have not tried or experienced, like heroin and murder. What makes it so that this has to be tried?

> It's the bare minimum to make an informed opinion.

Only if the usefulness is what is in question. But it is not.

Re:GitHub Copi­lot inves­ti­ga­tion by cdrini on Tuesday October 18, 2022 @04:50AM (#33244631)
Correct, it doesn't hold up generally. But it doesn't need to. It holds up here. We do not try things when there is exceptional risk or cost in the trying. Here there is no cost to trying, so it does not make sense not to try.

I believe the argument being made is that in _actual, real-world_ use of copilot, no copyright infringement happens. So it's not just about usefulness.

Re:GitHub Copi­lot inves­ti­ga­tion by gizzlon on Tuesday October 18, 2022 @07:38AM (#33245783)
> I believe the argument being made is that in _actual, real-world_ use of copilot, no copyright infringement happens. So it's not just about usefulness.

How would you know though? The burden of proof is on Copilot. Especially now that it has been shown to spit out copyrighted code.

Re:GitHub Copi­lot inves­ti­ga­tion by yunohn on Tuesday October 18, 2022 @06:02AM (#33245041)
You’re right, trying Copilot is equivalent to committing murder.

/s

Re:GitHub Copi­lot inves­ti­ga­tion by anigbrowl on Wednesday October 19, 2022 @08:07PM (#33269360)
> We can, and should, argue things we have not tried or experienced, like heroin and murder. What makes it so that this has to be tried?

It's not that you absolutely have to have experience with something, but you'd be foolish to discount the input of people who do. In debates about drug policy I try to be polite to people with zero first hand experience, but their contributions are rarely of interest. Murder is a bit more abstract insofar as anyone who has fully experienced it by definition didn't survive to testify, but I give a lot more weight to the views of people that have first-hand knowledge of violence and crime.

It's not that you shouldn't weigh in on a topic without first hand experience, but that it's a good idea to specify the scope of your understanding, or frame uncertainties as open questions rather than assumptions.

Re:GitHub Copi­lot inves­ti­ga­tion by LtWorf on Tuesday October 18, 2022 @03:59AM (#33244310)
On a different website I argued with a microsoft employee who said that copilot is great and so on and would not discuss unless I tried it.

I tried telling that it requires a credit card number to try it but he didn't believe me… I guess the thought that non-microsoft employees have to pay for microsoft stuff didn't occur.

Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Monday October 17, 2022 @11:35PM (#33242668)
That isn't sufficient to get you off the hook. Copyright covers derivative work, not just code that's reproduced verbatim.
Re:GitHub Copi­lot inves­ti­ga­tion by Too on Tuesday October 18, 2022 @12:40AM (#33243048)
Derivative work requires a major part of the original, before it’s considered by copyright.

A 3 line boilerplate is neither novel nor a major part of the original.

Re:GitHub Copi­lot inves­ti­ga­tion by smaudet on Tuesday October 18, 2022 @01:22AM (#33243253)
I think if copilot is heavily restricted to three line code samples, perhaps I could agree with this.

The example cited by the OP is not a three line code sample - if you've ever done matrix coding, you know that sparse matrix operations are not simple.

Sure you can reduce it to a function call, but then you have library usage instead of code theft.

I think actually perhaps this is a way copilot could ethically move forward - instead of lifting code verbatim if it merely suggested libraries and approaches "here is an example of sparse matrix filtering and some libraries which do it", that would be both useful and ethical, presuming it does not obscure the license.

Re:GitHub Copi­lot inves­ti­ga­tion by sdenton4 on Tuesday October 18, 2022 @02:07AM (#33243530)
...But the example cited by the OP isn't how anyone actually uses copilot...

From where I sit, the complainant has found an extremely convoluted (and buggy) way to copy-paste their own code and is very upset about it. By similar logic, we should restrict the use of ctrl-c and ctrl-v, because they allow very simple infringement of open source licenses. Find a sparse matrix multiplication library which uses the copied code without attribution and you can take them to court; the law is already sufficient for this.

Re:GitHub Copi­lot inves­ti­ga­tion by cornel_io on Tuesday October 18, 2022 @02:56AM (#33243883)
"Derivative work" is a very specific thing, and it's contrasted with "transformative work" in a way that matters a lot, and fair use intersects heavily with both.

Even when it comes to stuff that seems reaaaaally close to pure derivative: Googling "How long does it take to boil water?" => "If you're boiling water on the stovetop, in a standard sized saucepan, then it takes around 10 minutes for the correct temp of boiling water to be reached. In a kettle, the boiling point is reached in half this time."

That's a verbatim snippet pulled directly from https://unocasa.com/blogs/tips/how-long-to-boil-water, and yet Google exists and continues to do stuff like this under the fair use doctrine despite massive efforts to attack/monetize their service. [To be fair, Google does link results, which probably insulates them because it's less hurtful to the commercial interests of the source; that said, with open source there generally are no commercial interests to hurt (open source attribution will be a tough sell as an actual commercial interest), and that's specifically called out in the law as a factor]

Copilot is even less explicitly at risk IMO, in that it never even stores the text, nor can it reliably retrieve it. I have no idea what makes anyone think it should be more vulnerable than Google.

From the copyright.gov page on fair use (https://www.copyright.gov/fair-use/, worth reading in detail for anyone who cares about this stuff, also has links to a monumental number of cases with shockingly intelligible summaries): "Additionally, “transformative” uses are more likely to be considered fair. Transformative uses are those that add something new, with a further purpose or different character, and do not substitute for the original use of the work."

Copilot without any shadow of a doubt does add something new, with a further purpose, and does not substitute for the original use of any codebase on Github (it can't create any of the codebases in full, without manual guidance so extreme that you'd have to be using the actual original codebase as a reference, so it clearly cannot substitute for a single one of them, and that's what a lawyer will argue, likely successfully).

In the Google vs. Oracle case (see https://www.copyright.gov/fair-use/summaries/google-llc-orac...), a big piece of the fair use finding was that "its value in significant part derives from the value that those who do not hold copyrights, namely, computer programmers, invest of their own time and effort to learn." and "further[s] the development of � computer programs”. It's hard to see where Copilot wouldn't fall into that category, as well, and that's precedent on (multiple) appeal.

By my reading this should be a slam-dunk fair use ruling, unless precedent gets really upended, and Butterick is wasting a ton of time and effort for absolutely zero potential gain other than some bragging rights, but to each his own...I guess we all have to grind our axes from time to time.

Re:GitHub Copi­lot inves­ti­ga­tion by cornel_io on Tuesday October 18, 2022 @02:57AM (#33243886)
"Derivative work" is a very specific thing, and it's contrasted with "transformative work" in a way that matters a lot, and fair use intersects heavily with both.

Even when it comes to stuff that seems reaaaaally close to pure derivative: Googling "How long does it take to boil water?" => "If you're boiling water on the stovetop, in a standard sized saucepan, then it takes around 10 minutes for the correct temp of boiling water to be reached. In a kettle, the boiling point is reached in half this time."

That's a verbatim snippet pulled directly from https://unocasa.com/blogs/tips/how-long-to-boil-water, and yet Google exists and continues to do stuff like this under the fair use doctrine despite massive efforts to attack/monetize their service. [To be fair, Google does link results, which probably insulates them because it's less hurtful to the commercial interests of the source; that said, with open source there generally are no commercial interests to hurt (open source attribution will be a tough sell as an actual commercial interest), and that's specifically called out in the law as a factor]

Copilot is even less explicitly at risk IMO, in that it never even stores the text, nor can it reliably retrieve it. I have no idea what makes anyone think it should be more vulnerable than Google.

From the copyright.gov page on fair use (https://www.copyright.gov/fair-use/, worth reading in detail for anyone who cares about this stuff, also has links to a monumental number of cases with shockingly intelligible summaries): "Additionally, “transformative” uses are more likely to be considered fair. Transformative uses are those that add something new, with a further purpose or different character, and do not substitute for the original use of the work."

Copilot without any shadow of a doubt does add something new, with a further purpose, and does not substitute for the original use of any codebase on Github (it can't create any of the codebases in full, without manual guidance so extreme that you'd have to be using the actual original codebase as a reference, so it clearly cannot substitute for a single one of them, and that's what a lawyer will argue, likely successfully).

In the Google vs. Oracle case (see https://www.copyright.gov/fair-use/summaries/google-llc-orac...), a big piece of the fair use finding was that "its value in significant part derives from the value that those who do not hold copyrights, namely, computer programmers, invest of their own time and effort to learn." and "further[s] the development of computer programs”. It's hard to see where Copilot wouldn't fall into that category, as well, and that's precedent on (multiple) appeal.

By my reading this should be a slam-dunk fair use ruling, unless precedent gets really upended, and Butterick is wasting a ton of time and effort for absolutely zero potential gain other than some bragging rights, but to each his own...I guess we all have to grind our axes from time to time.

Re:GitHub Copi­lot inves­ti­ga­tion by teddyh on Tuesday October 18, 2022 @05:48AM (#33244968)
> Copilot is even less explicitly at risk IMO, in that it never even stores the text, nor can it reliably retrieve it. I have no idea what makes anyone think it should be more vulnerable than Google.

That doesn’t matter, IMHO. Once Copilot manages to copy a work, a copy has been created and copyright has been violated. If this occurence is reasonably likely, then Copilot is wittingly assisting in violating copyright.

Re:GitHub Copi­lot inves­ti­ga­tion by cornel_io on Tuesday October 18, 2022 @07:34AM (#33245746)
How likely that situation is is disputable. People have cherry picked some cases where by specifying a very particular comment you can get it to (unreliably) reproduce well-known pieces of code, sure. But that is neither the intended use of the product nor the actual way that a single person using the product really employs it, and that really, really matters. Judges are not automatons, and the fact that when and if this goes to court the developers will be able to get up and honestly say "this is a tool developed to help developers create new code that is not merely recreating the functionality of the code we trained the tool on, and all our users use it to create entirely new things" is going to matter when they argue that it is fair use/transformative work.

I do completely understand that a lot of people disagree with me morally, and think that extracting insights from scraping the public web should be illegal. You're free to have that opinion, but I'd recommend you start lobbying your congressman to change the law, because though I'm not a lawyer I hang out with a few who do copyright stuff, and I don't think the law as it stands is on your side. That said, who can say, maybe this will end up bubbling up through many layers of appeals and end up at the Supreme Court someday, this stuff is all certainly wildly outside the bounds of what anyone writing the copyright laws was thinking about back in the 70s (which I think was the latest significant iteration?) so it's fair to say it's a complete gray area.

Re:GitHub Copi­lot inves­ti­ga­tion by salawat on Tuesday October 18, 2022 @09:59AM (#33247246)
>But that is neither the intended use of the product nor the actual way that a single person using the product really employs it, and that really, really matters

And yet, someone has done so, and found that to be the case. Therefore, it falls under "normal use".

So make up your mind. Is software engineering only about assembling working programs, or assembling working programs + navigating license minutiae?

One of these, Copilot has a place in. The other it does not.

Re:GitHub Copi­lot inves­ti­ga­tion by cornel_io on Saturday October 22, 2022 @02:19AM (#33296002)
You may hope that a judge considers a really weird and cherry-picked weird edge case to be "normal use", but opposing counsel will argue the opposite, and have a lot of evidence if they actually look at real use.

"I can use a gun to shoot someone" doesn't make guns illegal, even if people do so with some regularity. "I shot someone to make the point that guns can kill people" is worth even less in the eye of the law, and that is literally what you're pointing to here.

Re:GitHub Copi­lot inves­ti­ga­tion by cornel_io on Saturday October 22, 2022 @02:22AM (#33296011)
And I don't know what you're even getting at with the "assembling working programs" vs "navigating license minutae" stuff. Copilot helps the former, and you're apparently trying to argue that it should be banned because some people are feeling angsty about the latter?
Re:GitHub Copi­lot inves­ti­ga­tion by batmanturkey on Tuesday October 18, 2022 @06:32AM (#33245283)
Google then handily provides you A LINK to the original ATTRIBUTED SOURCE.
Re:GitHub Copi­lot inves­ti­ga­tion by cornel_io on Tuesday October 18, 2022 @07:58AM (#33245935)
Yes, I mentioned that. And I think it would be great if GitHub added some sort of scan to see if it was accidentally returning some verbatim code and gave a link to the repo it came from, but the situation with Google was much more clearly harmful: by scraping and presenting verbatim quotes, they are directly siphoning web traffic away from the sites they scrape from, and many of those sites make money based on page views. That is direct economic harm, and the actual impact was significant for many companies, not merely theoretical.

With open source code, the harm is much less tangible, since negligibly few open source projects make money from people going to their GitHub pages because they're searching for code snippets (not zero, but almost). My guess is that an honest quantification would put the lost revenue due to Copilot's existence in the tens to maaaaaybe hundreds of dollars. Courts look at that type of thing, which is why I don't think this will end up being an issue, at least in the US. Europe is wild, who knows what they'll do there, and that's where activists on this topic should most wisely apply pressure, you can always convince someone in government there to throw a spear at a BigCo. You won't take them down, but you may get them to negotiate, and I don't even necessarily think that's a bad thing.

That said, even in the US, if enough people make noise then things could change, so I encourage you to speak to your congressperson (I will be as well, but arguing the other side, because I really do think this is fair use and I'd like to see it enshrined as such explicitly, because this fight is going to be extremely common over the next few decades).

Re:GitHub Copi­lot inves­ti­ga­tion by cycomanic on Tuesday October 18, 2022 @12:26AM (#33242972)
Ok so you don't care about the second part of the argument, you don't care about the danger of violating copyright.. The first question though is if training on large bodies of OSS is fair use. Are you saying you don't care about the copyright of your own work either? Or you don't care because you don't publish your work OSS?
Re:GitHub Copi­lot inves­ti­ga­tion by oefrha on Tuesday October 18, 2022 @12:29AM (#33242989)
I’m sure I’ve done more to OSS than 95% of commenters here. I publish my code under MIT when possible (and WTFPL for smaller projects), and yes, please train on my work or split out my functions verbatim, they are far less valuable than some people seem to believe. I don’t even care about the attribution part of MIT, it’s simply a nice to have when decent people use my code.
Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Tuesday October 18, 2022 @01:43AM (#33243394)
This isn’t just about OSS. If I have a public repo on GitHub without a license, you can’t rewrite that code and put it in your project. I own the copyright. The issue is that Copilot will still launder it into your project for you.
Re:GitHub Copi­lot inves­ti­ga­tion by tommek4077 on Tuesday October 18, 2022 @03:33AM (#33244133)
Oefrha just said that his, and probably yours, code is not worth that much if splitted into functions and commentary blocks. The value of software comes from its whole purpose, not your clever email-validation-regex you are so proud of.
Re:GitHub Copi­lot inves­ti­ga­tion by LtWorf on Tuesday October 18, 2022 @04:41AM (#33244565)
> not your clever email-validation-regex you are so proud of

Really? I challenge you to write a correct email validation regex.

Re:GitHub Copi­lot inves­ti­ga­tion by forgotpwd16 on Tuesday October 18, 2022 @04:01AM (#33244325)
>code is not worth that much if splitted into functions

Some algorithms in scientific computing require lots of effort to implement as nice, reusable, performant function. Those functions often more important than whatever the whole is doing because it's what most other people will be interested in using.

Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Tuesday October 18, 2022 @03:48AM (#33244227)
Then why use OSS licenses in the first place?

Let's just copy each other's code without attribution.

Re:GitHub Copi­lot inves­ti­ga­tion by tommek4077 on Tuesday October 18, 2022 @04:45AM (#33244593)
I am totally for this! Will bring eceryone forward in general without costing the society as much as this copyright bs.
Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Wednesday October 19, 2022 @03:41AM (#33258920)
Either that or people will stop posting their code publicly.
Re:GitHub Copi­lot inves­ti­ga­tion by pests on Tuesday October 18, 2022 @03:48AM (#33244230)
How many lines of code was the Oracle v Google case? 9?
Re:GitHub Copi­lot inves­ti­ga­tion by oefrha on Tuesday October 18, 2022 @04:16AM (#33244417)
Just so happens I think the case is bullshit. You would have a point if I supported Oracle.
Re:GitHub Copi­lot inves­ti­ga­tion by pests on Wednesday October 19, 2022 @03:42PM (#33266996)
Your lack of support of them doesn't change the facts.
Re:GitHub Copi­lot inves­ti­ga­tion by batmanturkey on Tuesday October 18, 2022 @06:35AM (#33245299)
Says you.

If it’s all just disposable code, WHY ISNT MICROSOFT TRAINING COPILOT ON WINDOWS AND OFFICE CODE?

Re:GitHub Copi­lot inves­ti­ga­tion by notamy on Tuesday October 18, 2022 @09:18AM (#33246657)
Because that code isn't publicly available, just like every private repo on GitHub, and any other company's/person's proprietary/private code?
Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Tuesday October 18, 2022 @09:47AM (#33247054)
Again, if I put code in a public repo on GitHub and don’t include a license that allows it, you cannot copy that code. It doesn’t matter that you’re able to access it.
Re:GitHub Copi­lot inves­ti­ga­tion by frumper on Tuesday October 18, 2022 @11:55AM (#33249349)
Cannot is a strong term. Telling me there may be consequences would be more accurate.
Re:GitHub Copi­lot inves­ti­ga­tion by abigail95 on Tuesday October 18, 2022 @01:17PM (#33250769)
I can claim fair use and short of an injunction there's nothing you can do to stop me.
Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Wednesday October 19, 2022 @03:43AM (#33258936)
Claiming fair use is not a fix all card you can play like that, there are a lot of nuences for that to hold on trial.
Re:GitHub Copi­lot inves­ti­ga­tion by kbelder on Tuesday October 18, 2022 @06:27PM (#33254916)
I'm allowed to read it and learn from it. To distill the core concepts and recreate it.
Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Wednesday October 19, 2022 @03:42AM (#33258929)
You as a human being, not you as a for profit company building a for profit product.
Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Tuesday October 18, 2022 @09:49AM (#33247086)
Maybe I’m the worst programmer in the world. It doesn’t matter. My code is still my code, and if I don’t explicitly license it such that you can copy it, you’re not allowed to.
Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Tuesday October 18, 2022 @03:47AM (#33244220)
Wait... Shouldn't you use a different license if you don't care about attribution?

Creative commons maybe.

Just because you, as someone who self proclaimed to have done more OSS than 95% of the commenters here, does not know how to use OSS licenses, doesn't mean that the copyright question being discussed here is a non issue.

The issue is that you don't care about what the licenses in your code mean:

> I publish my code under MIT when possible (...) please train on my work or split out my functions verbatim (...) I don’t even care about the attribution part of MIT

Re:GitHub Copi­lot inves­ti­ga­tion by oefrha on Tuesday October 18, 2022 @04:02AM (#33244328)
I choose MIT because it’s a widely used permissive license most people are confident about using, not because I will personally pursue every clause in it. I will not take action against anyone using my MIT-licensed code without attribution.

Having been a member of a very high profile permissively licensed project and having started a few relatively popular ones of my own, I’d say I don’t need to take licensing advice or be called “does not know how to use OSS licenses” from someone who laughably advises using Creative Commons, when Creative Commons itself advises against using CC licenses for source code, except CC0, which is entirely different from CC.

Re:GitHub Copi­lot inves­ti­ga­tion by planede on Tuesday October 18, 2022 @04:32AM (#33244513)
There is MIT-0, a no-attribution variant of the same license.
Re:GitHub Copi­lot inves­ti­ga­tion by ranguna on Wednesday October 19, 2022 @03:41AM (#33258912)
My good, sorry to move away from the topic, but do you realise how childish you look with your comments?

I was considering not replying, but here goes nothing....

> not because I will personally pursue every clause in it.

Then you are out of the game, because all clauses should be respected, or else you are committing something very close to an illegality when you violate said clauses. If you don't want a specific clause, consult a lawyer and remove it, or use another license.

> Creative Commons itself advises against using CC licenses for source code

So before your didn't care about respecting clauses and now you do?

I could argue: there are some bits of text in CC that make it not a good license for code, but I don't care because I don't respect those clauses. I'm not going to make that argument, because it doesn't make any sense. You either use a license and respect it or you don't.

Re:GitHub Copi­lot inves­ti­ga­tion by gwnywg on Tuesday October 18, 2022 @04:00AM (#33244315)
Just because you don't care does not mean others should not care, even if they are less valuable coders than you.

I mostly contribute by finding issues and reporting them, does that make me less of a OSS contributor than you?

And yet I do care if my private project is used by behemoth like Microsoft without my consent, even if it's only poorly written fizzbuzz. Why? because if I wanted to share it I would publish.

Re:GitHub Copi­lot inves­ti­ga­tion by oefrha on Tuesday October 18, 2022 @04:10AM (#33244366)
I was answering the questions “Are you saying you don't care about the copyright of your own work either? Or you don't care because you don't publish your work OSS?”

Feel free to care.

Re:GitHub Copi­lot inves­ti­ga­tion by skeaker on Tuesday October 18, 2022 @04:16AM (#33244422)
I personally don't care about the copyright of my own work when it comes to code. I publish the majority of my work anonymously with a clause that just says something along the lines of "feel free to use some or all of this without any attribution." Denying others from using my code feels like it goes against the essence of OSS itself. It's like if I found the solution to some complicated math problem but didn't let anyone else see it because it's "mine."
Re:GitHub Copi­lot inves­ti­ga­tion by salawat on Tuesday October 18, 2022 @10:02AM (#33247282)
You are both a scholar, and a gentleperson. Thank you for treating the field like it is instead of some social value extraction platform.
Re:GitHub Copi­lot inves­ti­ga­tion by concordDance on Tuesday October 18, 2022 @04:00AM (#33244318)
I've yet to see anyone come up with a harm current CoPilot could do that is within an order of magnitude of the good it does. Why on earth should we care that it resulted in 20 lines of code being copied in some rare circumstances? The transaction costs alone make that code worthless as a saleable thing.
Re:GitHub Copi­lot inves­ti­ga­tion by onethought on Tuesday October 18, 2022 @06:44AM (#33245363)
Straw man. That isn't what Github/Copilot is doing.

If open source communities are worried about having their source code copied... then don't open the source. Keep it closed, keep it off GitHub... I mean the genie is already out of the bottle, so doesn't really matter what they do now.

You can't prompt Copilot with things like: # Function that detects spam accurately

And get anything useful/sensitive/competitive

Is there really super sensitive algorithms out there that Copilot is exposing that are otherwise unknown?

Re:GitHub Copi­lot inves­ti­ga­tion by neoromantique on Tuesday October 18, 2022 @09:24AM (#33246720)
Hi! I'll give some insight onto why I benefit tremendously from CoPilot

I have a very severe ADHD and as a result terrible memory, I've been working as a dev for almost a decade now and it always was almost entirely in the browser with a search bar, not IDE, and me working with infrastructure doesn't help as I encounter more than one programming language at a time, daily.

CoPilot helps me not making dozens of jr. dev level search queries daily as I can formulate query right in the IDE and it will fill in the basic algo's, data types, language abstractions that I know exist (as I use them all the time), but I don't remember how to actually invoke them, despite doing so just an hour ago. This is the most useful part of copilot, not the complex and very specific code.

--

In case of this code, copilot merely lights up the problem that authors code is sprinkled on countless codebases with weird/no attribution or licensing.

Re:GitHub Copi­lot inves­ti­ga­tion by woah on Wednesday October 19, 2022 @04:55PM (#33267814)
> The only way you can get it to do that is to bait it with the function names of functions that have already been copy and pasted thousands of times onto GitHub without proper licenses

What? You left out the second line of the quote. It never reproduces copyrighted content for me because I'm not trying to bait it into doing that.

Re:GitHub Copi­lot inves­ti­ga­tion by burkaman on Monday October 17, 2022 @11:13PM (#33242548)
I don't think most people are concerned that Copilot is going to be reproducing verbatim copyrighted code, it's more that it sucks that a giant corporation is going to make a billion dollars from a tool that is entirely built off of millions of peoples' work who were never asked permission and will never be compensated.
Re:GitHub Copi­lot inves­ti­ga­tion by johnfn on Monday October 17, 2022 @11:33PM (#33242660)
That's hardly a new thing! For instance, Google search makes billions of dollars by indexing content that other people make.
Re:GitHub Copi­lot inves­ti­ga­tion by nonbirithm on Monday October 17, 2022 @11:55PM (#33242784)
My guess is the act of production that is passed as original content tends to have more avenues to harm producers than consumption.

Alarm bells of this magnitude haven't been rung about people torrenting films for decades; it's a given that some people are just going to do it and there's little that can be done to stop it.

Producing new data from original data of questionable lineage makes the questionable acts visible. Copilot and the like actively encourage this creation.

If it were possible to peek into the rooms of everyone who downloaded a torrent to admonish them then maybe pirating would have been made a modicum more taboo. But those consumers never intended to leave their rooms. Copilot forces them to leave their rooms if they want their derivative work to be used.

Re:GitHub Copi­lot inves­ti­ga­tion by cycomanic on Tuesday October 18, 2022 @12:29AM (#33242992)
It should be noted that some juristictions are starting to restrict this (e.g. Australia). Also I would argue if Google would randomly display content of full websites and never post links to the original content it would be in a lot more legal trouble.
Re:GitHub Copi­lot inves­ti­ga­tion by johnfn on Tuesday October 18, 2022 @12:54AM (#33243116)
> Also I would argue if Google would randomly display content of full websites and never post links to the original content

Google does do this though. Just Google for an easy to answer question, like “when was George Washington born”

Re:GitHub Copi­lot inves­ti­ga­tion by kvdveer on Tuesday October 18, 2022 @01:37AM (#33243353)
The answer to a factual question is not copyrightable, so while you may have moral problems with that, there is no legal argument.

The same applies to all realistic use-cases for copilot by the way. Whatever is produces is not copyrightable.

Re:GitHub Copi­lot inves­ti­ga­tion by cycomanic on Tuesday October 18, 2022 @02:08AM (#33243535)
> The answer to a factual question is not copyrightable, so while you may have moral problems with that, there is no legal argument.

Correct.

>The same applies to all realistic use-cases for copilot by the way. Whatever is produces is not copyrightable.

That's a pretty bold statement to make. How do you know how people use copilot? Also IIRC Oracle vs Google essentially determined 3 lines of code can be copyrightable. So I think you statement fails on two points, you can't really predict how people use copilot and you cannot predict what a court would decide is copyrightable (this is much less straight forward than statement of facts).

Re:GitHub Copi­lot inves­ti­ga­tion by xigoi on Tuesday October 18, 2022 @01:08AM (#33243187)
Google Search links to the original content. Copilot doesn't.
Re:GitHub Copi­lot inves­ti­ga­tion by janosdebugs on Tuesday October 18, 2022 @01:40AM (#33243372)
When you ask it a question, it will often simply construct an answer from the pages it indexed, so people don't have to click. Sure, it links it, but for what? Thankfully, the answers are almost always useless.
Re:GitHub Copi­lot inves­ti­ga­tion by johnfn on Tuesday October 18, 2022 @03:02AM (#33243924)
As I responded to someone else, this isn't always true. Google "when was George Washington born".
Re:GitHub Copi­lot inves­ti­ga­tion by hypertele-Xii on Tuesday October 18, 2022 @03:23AM (#33244055)
George Washington's birthday is hardly copyrightable.
Re:GitHub Copi­lot inves­ti­ga­tion by tommek4077 on Tuesday October 18, 2022 @03:36AM (#33244157)
So are most of your functions and methods.
Re:GitHub Copi­lot inves­ti­ga­tion by throwaway675309 on Tuesday October 18, 2022 @03:30AM (#33244117)
Maybe but it also uses those index cards that show a summary of information so you don't need to navigate to the actual website that contain the original content, there might be a link there but it's usually small and practically unnoticeable.
Re:GitHub Copi­lot inves­ti­ga­tion by xigoi on Tuesday October 18, 2022 @06:24AM (#33245202)
If Copilot provided a “small and practically unnoticeable” attribution to the code used, it would definitely improve the situation, especially for licenses like MIT that require attribution and nothing else.
Re:GitHub Copi­lot inves­ti­ga­tion by rroot on Tuesday October 18, 2022 @04:13AM (#33244391)
Google helps you find someone's content. Copilot helps you rip off someone's content.
Re:GitHub Copi­lot inves­ti­ga­tion by burkaman on Tuesday October 18, 2022 @09:40AM (#33246963)
That's true, and when Google started extracting information from web pages and displaying it in results pages without driving any traffic to the original websites, the authors of those pages were justifiably upset.

Google Search is ethically acceptable because for the most part website creators like being in search results and are "compensated" in the form of more visitors, and if they don't like it they can easily exclude themselves. Website creators famously do NOT like it when Google indexes their content and then serves it up independently.

Re:GitHub Copi­lot inves­ti­ga­tion by magic_hamster on Tuesday October 18, 2022 @10:47AM (#33248047)
Google makes money from ads. When you strip those away, purely indexing the web and offering a search engine is probably costing them money, not earning.
Re:GitHub Copi­lot inves­ti­ga­tion by rmahan on Monday October 17, 2022 @11:33PM (#33242655)
GitHub’s free code storage, static site hosting, etc. is compensation

If you aren’t paying for the product, you are the product.

Re:GitHub Copi­lot inves­ti­ga­tion by remram on Monday October 17, 2022 @11:40PM (#33242703)
You can't give someone a dime that they could have easily picked up from any of your competitors too and then break it into their house claiming they had been compensated. In this case they even steal code authored by people who never used GitHub at all, but had someone else mirror it or publish it on GitHub.
Re:GitHub Copi­lot inves­ti­ga­tion by mkmk3 on Tuesday October 18, 2022 @04:20AM (#33244443)
Not fair, while giving you the dime I'm pretty sure they quietly whispered something about them getting to live in your walls as compensation
Re:GitHub Copi­lot inves­ti­ga­tion by speedgoose on Tuesday October 18, 2022 @12:22AM (#33242947)
GitHub’s business model is simple, they use the free tier to stay the main platform and easily attract paying customers.
Re:GitHub Copi­lot inves­ti­ga­tion by LtWorf on Tuesday October 18, 2022 @04:47AM (#33244608)
Uh? What about projects that are mirrored on github? Why are their original authors being punished if they don't even own a github account?
Re:GitHub Copi­lot inves­ti­ga­tion by bergenty on Monday October 17, 2022 @11:54PM (#33242778)
So what? Anti progressive luddites, it makes my blood boil.
Re:GitHub Copi­lot inves­ti­ga­tion by AlexandrB on Tuesday October 18, 2022 @12:08PM (#33249590)
When OSS code gets ripped off and people are mad: "Anti progressive luddites".

When closed source code leaks: "Copyright infringement by criminals".

What's the difference? There's plenty the world could learn from the source code of Windows or GTA6 and having access to the source of these large projects would move society forward faster. So why are OSS contributors protecting their rights "Anti progressive luddites", while the large copyright owners who guard their proprietary code like a dragon guarding gold are let off the hook?

Re:GitHub Copi­lot inves­ti­ga­tion by anigbrowl on Wednesday October 19, 2022 @08:55PM (#33269666)
You're assuming the person you replied to holds both those opinions.
Re:GitHub Copi­lot inves­ti­ga­tion by sweetheart on Tuesday October 18, 2022 @12:10AM (#33242862)
I don’t think anyone really cares about that kind of stuff, though. Like, there are loads of examples of similar things which no one (rightfully) bags an eye at. Like if I take a photograph of you out in the public and sell the photo for $1 million, would you expect compensation? Or if someone compiles a list of the best restaurants in the world and sells that list, do you think the restaurants should be compensated?

The value that is being derived here is in the curation of the material, not the material itself.

Re:GitHub Copi­lot inves­ti­ga­tion by Test0129 on Tuesday October 18, 2022 @02:36AM (#33243735)
Bad example. A better example is I am a vendor across the street giving away free books. However, to comply and get a free book I require you to keep the book's bibliography intact.

You don't do this. You get my books, cut out the bibliography, glue all the pages together, and then sell the book as your own.

It is my book and all you did is derive some work from it.

Curation companies have the same problem and there are plenty of high profile lawsuits about it.

Re:GitHub Copi­lot inves­ti­ga­tion by burkaman on Tuesday October 18, 2022 @09:36AM (#33246902)
> if I take a photograph of you out in the public and sell the photo for $1 million, would you expect compensation?

I mean I wouldn't expect it, but I think I'd be pretty annoyed if you didn't ask permission and then made a bunch of money off my image. It's easy to find stories from the subjects of famous photographs who feel like they've been exploited. Just off the top of my head there's Afghan Girl, the kid from the Nirvana album, Harvard's collection of photos of enslaved people, and Henrietta Lacks is sort of a similar case.

> if someone compiles a list of the best restaurants in the world and sells that list, do you think the restaurants should be compensated?

No, but here's a better example: you make friends with a bunch of food critics, collect their thoughts and opinions and favorite secret spots, and then publish a book based on that stuff without ever telling them what you were doing or compensating or crediting them.

I'll give a concrete example: I was rock climbing recently and met an old guy who was sort of the local expert, and he told me how some other non-locals had come in and kind of mined him for information about the area, all the routes, etc. and then published a guidebook without crediting him at all. He felt pretty upset and exploited by that, and I felt bad for buying the guidebook because I had assumed it was written by some local climbers and didn't realize they got most of their info from someone else.

It's not illegal, but it is unethical.

Re:GitHub Copi­lot inves­ti­ga­tion by nfw2 on Tuesday October 18, 2022 @06:46AM (#33245383)
If Copilot makes a billion dollars, it is only because it is generating at least a billion dollars worth of value to the community of developers who want to use it.

The people painting Microsoft as a big, greedy trust conveniently ignore that Copilot would actually be empowering the ecosystem of tech companies to develop services that compete with Microsoft faster and more easily.

Re:GitHub Copi­lot inves­ti­ga­tion by burkaman on Tuesday October 18, 2022 @09:16AM (#33246630)
Isn't that the corporate dream though, to make all your competitors dependent on you?
Re:GitHub Copi­lot inves­ti­ga­tion by nightski on Monday October 17, 2022 @10:58PM (#33242464)
Personally I'm not worried about the end user using copyrighted code. That is their responsibility. If you have verbatim GPL code in your commercial closed source code base that is a liability and it might be dangerous to use copilot.

What I have more of a problem with is Microsoft charging for copilot which was trained on copyrighted code without any permission whatsoever which they really have no right to utilize/charge for.

Re:GitHub Copi­lot inves­ti­ga­tion by andyp-kw on Monday October 17, 2022 @11:01PM (#33242477)
As a human, if I learn how to program by studying copyrighted code, is it unethical for me to use that knowledge to make a living ?
Re:GitHub Copi­lot inves­ti­ga­tion by kovac on Monday October 17, 2022 @11:41PM (#33242708)
No, as long as you respect the original authors' terms of use of that "knowledge"
Re:GitHub Copi­lot inves­ti­ga­tion by skydhash on Monday October 17, 2022 @11:03PM (#33242488)
If you go around pasting code ad verbatim, a lot of people would be upset too.
Re:GitHub Copi­lot inves­ti­ga­tion by bamboozled on Monday October 17, 2022 @11:11PM (#33242536)
The difference is this, you’re likely working for the company whose proprietary code you’re working on and using as a “training model” while contributing to the greater good of that codebase.

You’ve been authorised to see this code.

Re:GitHub Copi­lot inves­ti­ga­tion by randomdata on Monday October 17, 2022 @11:18PM (#33242576)
I learned to code when a misconfigured CGI server spit out an application's code (it was written in Perl) instead of executing it. While that starts going down the long and complicated road of whether or not the machine is acting definitively, I think for our purposes here we can assume that the intent was for me to not have access to the code.
Re:GitHub Copi­lot inves­ti­ga­tion by bamboozled on Monday October 17, 2022 @11:38PM (#33242691)
So you were probably illegally accessing another person or companies systems.

Nice you got something out of it, I'm not judging you either, but it was probably not the correct way to operate. What you should've done was notify the owners of the incorrectly configured system and left it at that.

You're also not a massive international conglomerate who should know better than to read every ones code and use it to turn a profit.

I use Github like a bank, not a public library (unless I'm working on open source). I never would've allowed them to read through all my code and use it for profits without at least asking.

Re:GitHub Copi­lot inves­ti­ga­tion by randomdata on Tuesday October 18, 2022 @12:34AM (#33243019)
> So you were probably illegally accessing another person or companies systems.

Illegal would imply some kind of intent or malice. I was legitimately trying to access the executed result, which I would have been authorized to do if the service was operating normally.

> What you should've done was notify the owners of the incorrectly configured system and left it at that.

Seems unrealistic to "leave it at that". I had to read the output to understand it wasn't what I expected, and once I read it I knew how to code, at least to a cursory degree. The code was simple and it was a service I used frequently, so it was immediately clear how the code translated to the results I was accustomed to.

> I use Github like a bank, not a public library (unless I'm working on open source). I never would've allowed them to read through all my code and use it for profits without at least asking.

I don't know what kind of banks you deal with, but banks normally do read through your banking records and use that information to sell services to their clients – notably loans, which require knowledge of your deposits to offer.

Re:GitHub Copi­lot inves­ti­ga­tion by cfeduke on Tuesday October 18, 2022 @12:49AM (#33243088)
> So you were probably illegally accessing another person or companies systems.

Misconfigured CGI handlers in Apache were very common in the late 90s, treating Perl as text/plain. There's no laws being broken, just a bad httpd.conf and no one is getting locked up for malicious intent.

Re:GitHub Copi­lot inves­ti­ga­tion by bamboozled on Tuesday October 18, 2022 @12:58AM (#33243146)
If I leave my door unlocked, is it ok for you to come into my home and have a party ? Could I do that at your house or place of business ?

What if you intentionally or unintentionally took down a server that controlled important infrastructure which people depended greatly on? Flood warning system for example ?

Grow up.

Re:GitHub Copi­lot inves­ti­ga­tion by lolc on Tuesday October 18, 2022 @03:27AM (#33244090)
So I write you a letter asking for information and you accidentally copy me your notes on how to gather the information in your response. Nothing illegal is happening when I read your notes. Maybe I should not read them for ethical reasons, but it's not illegal.
Re:GitHub Copi­lot inves­ti­ga­tion by bamboozled on Wednesday October 19, 2022 @04:29AM (#33259232)
This only applies if you were reading the code, not executing any code on the remote system (which I thought you were doing). It sounds like you were doing something different.

Either way, I still think you're in the wrong, kind of like checking out a naked person getting changed because they accidentally left their blind open. It was available, maybe it was clever, but it's a strange way to learn how to code. Why didn't you just buy a coding book, or borrow some from the library ? Was the code really of good quality if the server was configured so badly?

Obviously we have a difference of opinion and that's ok.

Re:GitHub Copi­lot inves­ti­ga­tion by lolc on Wednesday October 19, 2022 @09:07AM (#33261567)
The issue as described by the original poster was that the code was not executed but displayed. They read it and understood how it works. This set them on a trajectory to try it themselves. This is how they started. Maybe a book was involved at a later stage.

Sure, you can argue that they were not supposed to read the code, so they shouldn't have. But without some tangible harm I don't see why we're supposed to disapprove of it. Maybe allow some hacker spirit while posting on Hacker News :-)

Re:GitHub Copi­lot inves­ti­ga­tion by bamboozled on Wednesday October 19, 2022 @08:56PM (#33269670)
I’ve done similar things in the past so I said I’m not judging them, but after some time working with computers myself I’ve become more compassionate and I think the better thing to do is help a fellow sys admin and report the problem. That’s the hacker spirit.
Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Monday October 17, 2022 @11:06PM (#33242501)
Unless Microsoft is secretly powering Copilot with Mechanical Turk, that isn't what's happening here.
Re:GitHub Copi­lot inves­ti­ga­tion by noasaservice on Monday October 17, 2022 @11:20PM (#33242589)
Why not complete that analogy?

What if instead of Copilot, it was a bunch of humans who were searching all the source code they could access and then copying/autocompleting that code, regardless of the license.

Is that still OK? If yes, why?

Re:GitHub Copi­lot inves­ti­ga­tion by ctvo on Monday October 17, 2022 @11:36PM (#33242676)
A paid service where tens of hundreds of people search for publicly available code snippets and send them to you? I believe they call that outsourcing in some circles.
Re:GitHub Copi­lot inves­ti­ga­tion by jakelazaroff on Monday October 17, 2022 @11:29PM (#33242639)
You're reading too much into my comment. All I'm saying is that Copilot isn't "learning" like a human does.
Re:GitHub Copi­lot inves­ti­ga­tion by remram on Monday October 17, 2022 @11:44PM (#33242728)
In this case we'd be sending subpoenas to those people to make sure they hadn't been instructed to disregard licenses or copy large pieces of code verbatim.
Re:GitHub Copi­lot inves­ti­ga­tion by didibus on Tuesday October 18, 2022 @12:22AM (#33242951)
That wouldn't be ok, I'm assuming that's what you're implying as well? In any case I would say that's not ok.

Copying code, even if its from a mix of many different places, and the results look like a mosaic, would still be copying.

If the Mturk worker just suggested an implementation they came up with that be fine.

Re:GitHub Copi­lot inves­ti­ga­tion by cycomanic on Tuesday October 18, 2022 @12:33AM (#33243015)
Why not make the a ology the other way. If I put massive amounts of code into a database and develop some sort of query language that spits out various parts of the contents of the database based on the query am I covered by fair use?
Re:GitHub Copi­lot inves­ti­ga­tion by pretendscholar on Tuesday October 18, 2022 @12:03AM (#33242831)
The difference is scale. You will get old and die before you ever even reach 10 percent of the corpus.
Re:GitHub Copi­lot inves­ti­ga­tion by comex on Tuesday October 18, 2022 @12:22AM (#33242953)
That only shows that humans are better at learning than machines are right now. I may not have read as much code as Copilot, but I have read quite an amount of it, and it strongly informs the code I write, with respect to style and structure and algorithms. (I don't copy functions verbatim from memory, but neither does Copilot the vast majority of the time.)
Re:GitHub Copi­lot inves­ti­ga­tion by didibus on Tuesday October 18, 2022 @12:16AM (#33242908)
I'll repeat something I asked elsewhere here.

From what I understand, it is not proven that the AI uses the knowledge of concepts and logic to write the new code. It is likely that it actually performs instead a very optimized stitching of code it previously saw.

Is my understanding outdated here?

From the ethical point of view, I'd say you're making some assumptions here that result in it being ethical when a human does it, and those assumptions might not hold for an AI.

For example, you're assuming a win/win outcome, where your learnings from copyrighted open source code don't harm the original authors ability to find work, or the value of their code.

With an AI I think there are possibilities we're looking at a win/lose situation, where Microsoft wins big, and maybe some other developers that also profit of their use of copilot, but where the original authors of the code that went to train it see their skills be devalued over time as a direct consequence.

In my opinion, a win/lose is unethical. What I'm not convinced is that we're looking at a win/lose, but I think there's a possibility.

Re:GitHub Copi­lot inves­ti­ga­tion by Siira on Tuesday October 18, 2022 @01:11AM (#33243202)
> a very optimized stitching of code it previously saw.

I have seen this line repeated many times, but I never saw it actually explained. A lookup table is dumb and easy to understand/interpret. Deep models are not that. They are also not a linear interpolation of … something. What exactly is the claim being made here? Yes, deep models don’t generalize too well on ood data. How does this make them a “very optimized” lookup table?

Re:GitHub Copi­lot inves­ti­ga­tion by nightski on Tuesday October 18, 2022 @01:36AM (#33243343)
I mean an NN is, almost by definition, a weighted lookup table. The process to generate that table is not relevant.
Re:GitHub Copi­lot inves­ti­ga­tion by Siira on Tuesday October 18, 2022 @08:49AM (#33246362)
Not at all. That would only be true if there weren't nonlinearities between the layers.
Re:GitHub Copi­lot inves­ti­ga­tion by nonrandomstring on Tuesday October 18, 2022 @04:14AM (#33244408)
> It is likely that

Here's the real problem:

We're on a forum in which most of the participants are in at least the top 0.1% of technical ability, and yet here we are waving our hands and speculating on "what AIs think" and how "they probably/likely compute" things.

Last week I met with a director of a new "AI" research group, chuffed to the nines with a massive research grant he just landed. I'm happy for him, with only one little concern - that he knows nothing whatsoever about machine learning or mathematics and outspokenly doesn't believe that "knowledge is that important in the new reality".

Copyright infringement is an inconvenience for people who worry about that sort of stuff. Sure. But don't you all see a much more serious issue? It's bad enough that code is already so precariously bloated and over-complex nobody bothers to debug critical applications any more. Now we want to add "assistance" from tools that nobody understands.

Re:GitHub Copi­lot inves­ti­ga­tion by xxs on Tuesday October 18, 2022 @03:50AM (#33244240)
If copolot has the ability to write a whole application instead of suggesting based on its lookup and context, you might have a point. Unless proven otherwise I'd consider it a giant lookup table with (self)adjusting weights.
Re:GitHub Copi­lot inves­ti­ga­tion by gwnywg on Tuesday October 18, 2022 @04:13AM (#33244394)
You eventually, at some point, write your own code which is not reproduced. From what I see Copilot authors state that copilot is reproducing code, it is not inventing new code like human being would. It seems to be big and efficient database of somebody else's code that it reproduces.
Re:GitHub Copi­lot inves­ti­ga­tion by AlexandrB on Tuesday October 18, 2022 @12:17PM (#33249733)
Setting aside the very real question of whether AI "learns" the same way we do, it's bad enough we treat corporations as "people" in a legal sense, let's not start extending the same courtesy to software tools.

People have special rights and responsibilities under our legal system - we don't send an airplane that has a mechanical fault to prison for a crash nor do we extend right to life to a web server. Humans have an implicit the right to learn by reading copyrighted material, machines have no such right.

Re:GitHub Copi­lot inves­ti­ga­tion by MarcelOlsz on Monday October 17, 2022 @11:18PM (#33242581)
If it was also free and open source, sure. But it's not, it's a paid product that one party reaps the profits from.
Re:GitHub Copi­lot inves­ti­ga­tion by baby on Monday October 17, 2022 @11:13PM (#33242551)
I call these people open source haters. They selectively choose what they want open source to mean, and are against the fundamental ideas of open source.

Long live Copilot. It’s an amazing product that shows what we are capable of thanks to crowdsourcing and bleeding edge technology. We live in the future, and progress never remembers those who tried to stop it.

Re:GitHub Copi­lot inves­ti­ga­tion by shbooms on Monday October 17, 2022 @11:33PM (#33242658)
> the fundamental ideas of open source

A bit ironic that Copilot itself is not open source.

Re:GitHub Copi­lot inves­ti­ga­tion by bamboozled on Monday October 17, 2022 @11:46PM (#33242736)
Really had to laugh at this one...
Re:GitHub Copi­lot inves­ti­ga­tion by didibus on Tuesday October 18, 2022 @12:25AM (#33242970)
The plea seems to be against proprietary tech built off open source efforts.

If they open sourced Copilot then it would probably comply with most of the licenses anyways.

Like at the very, least, respect the licenses, that means, give attribution, and provide your own source as open source and under the same terms.

Open source is what allowed this progress in the first place, and the way I see it, commercial interest is actually simply trying to slow it down by keeping it behind proprietary trade secrets.

Re:GitHub Copi­lot inves­ti­ga­tion by lassant on Tuesday October 18, 2022 @12:30AM (#33243002)
The definition of "open-source" will be given by the license included with the software (or lack thereof). It could mean that we adhere to the Open Source Initiative, or it could mean that the source code is freely available even though its use is not permissive. The license will tell, not your pre-defined conception of "open-source".
Re:GitHub Copi­lot inves­ti­ga­tion by the_lucifer on Tuesday October 18, 2022 @12:54AM (#33243114)
> I call these people open source haters. They selectively choose what they want open source to mean, and are against the fundamental ideas of open source.

B..but, Copilot isn't open source though?

Re:GitHub Copi­lot inves­ti­ga­tion by culi on Monday October 17, 2022 @10:51PM (#33242430)
Yeah I think it just means a non-commercial alternative would be made to replace it
Re:GitHub Copi­lot inves­ti­ga­tion by usefulcat on Tuesday October 18, 2022 @12:06AM (#33242843)
Fine, but what happens if Copilot is so successful that it ends up actively harming the very projects that it requires for training material? If you value Copilot then you should be concerned about that, even if you don't care at all about any ethical considerations.

Seems very similar to a "tragedy of the commons" type of situation.

Re:GitHub Copi­lot inves­ti­ga­tion by thomasahle on Tuesday October 18, 2022 @12:51AM (#33243102)
> It is genuinely useful. I don't care that it reproduces copyrighted content.

I feel like the title of the article is literally written for you: """Maybe you don’t mind if GitHub Copi­lot used your open-source code with­out ask­ing. But how will you feel if Copi­lot erases your open-source com­mu­nity?"""

If you want to keep having useful tools based on open source code in the future, it is in your interest that people still want to write open source code. It is still too early to say how much of a chilling effect projects like Copilot will have on that. But clearly many (just read this comment section, myself included) are having second thoughts.

Re:GitHub Copi­lot inves­ti­ga­tion by solidasparagus on Tuesday October 18, 2022 @05:09AM (#33244742)
But that part of the argument is far more nebulous and bullshitty than the copyright argument. The idea that copilot is killing any substantial open-source project just isn't true right now. Copilot doesn't generate libraries worth of functionality, it generates small functions or less. Open-source projects remain as important as they were before copilot.
Re:GitHub Copi­lot inves­ti­ga­tion by neurostimulant on Tuesday October 18, 2022 @12:57AM (#33243138)
> I won't be afraid of accidently violating copyright myself, because I won't be trying to bait it into reproducing heavily copy&pasted cherrypicked examples, and I won't use 20 lines of its output with zero modification.

Maybe you can exercise some discipline when using copilot, but what about your coworkers? Many companies might not want their employees to insert copyrighted codes into their projects accidentally.

Re:GitHub Copi­lot inves­ti­ga­tion by perryizgr8 on Tuesday October 18, 2022 @01:08AM (#33243189)
> Many companies might not want their employees to insert copyrighted codes into their projects accidentally.

They can opt not to pay for this entirely voluntary service.

Re:GitHub Copi­lot inves­ti­ga­tion by pengaru on Tuesday October 18, 2022 @01:03AM (#33243170)
> It is genuinely useful. I don't care that it reproduces copyrighted content.

Plagiarizing is already understood to be a genuinely useful practice.

Re:GitHub Copi­lot inves­ti­ga­tion by concordDance on Tuesday October 18, 2022 @04:04AM (#33244341)
No, its mostly isn't. It's mostly done to cheat on academic contests (and thus getting a less skilled student/researcher for positions). Copying entire works of fiction doesn't really add anything to the world.

Copying a passage here and there when making a new work? I don't think the courts have ever ruled that plagiarism.

Re:GitHub Copi­lot inves­ti­ga­tion by 123_abc on Tuesday October 18, 2022 @01:15AM (#33243221)
>The only way you can get it to do that is to bait it with the function names of functions

I get that using function names is an obvious way to get copilot to generate contested code, but has someone tried to get copilot to generate contested code in a way that users might sincerely be using copilot for productivity ? How do you get to the claim it is the "only way" ?

Re:GitHub Copi­lot inves­ti­ga­tion by Test0129 on Tuesday October 18, 2022 @02:32AM (#33243704)
> It would be sad if someone succeeded in shutting down CoPilot for this kind of copyright stuff.

It enables the large scale theft of code. It completely ignores licenses. There are plenty of open source licenses that allow code use with proper attribution yet Copilot doesn't (and probably can't) figure a way to comply with all of them.

Copilot, as the article suggests, is a marketing stunt. To me it's more than that. It's Microsoft pushing the boundaries of law using it's money muscle again. I have been screaming from the rooftops that VSCode was just M$ spyware and I get legitimately made fun of for it. Now we have Copilot as well and they aren't even hiding it.

To address your point more directly if you do any work for monetary gain Copilot is a defacto liability. You can't just take 20 lines of completely stolen code, modify a few things, and call it your own. That's why legal reverse engineering has an entire black-box method of development. QA, researchers, and developers aren't even allowed to talk to each other directly.

I hope Copilot does get shutdown. Along with everything like it. It is one thing to have an AI trained on your workplace's code, or specific code following specific licenses, but the blatant theft of not only licensed open source code, but also private code, is a terrible precedent to have.

Re:GitHub Copi­lot inves­ti­ga­tion by concordDance on Tuesday October 18, 2022 @04:02AM (#33244330)
So many comments like this, but none list a tangible harm that's anywhere near the millions of man hours systems like this will save. Heck, basically none (including this one!) list a harm at all!
Re:GitHub Copi­lot inves­ti­ga­tion by toastal on Tuesday October 18, 2022 @04:35AM (#33244529)
If it's going to do that much "good" for humanity, then the dataset should be 0BSD or CC0, not proprietary. Project Gutenberg does good by archiving and allowing access to a lot of books and everything is under Creative Commons to continue to allow people the freedom to use the data as well as attribute the original authors. GitHub isn't doing this at all and is instead selling a proprietary product built on scanning open source that didn't consent.
Re:GitHub Copi­lot inves­ti­ga­tion by mkmk3 on Tuesday October 18, 2022 @04:28AM (#33244493)
Honestly, kinda fair. How is it different to pirating anything, and the moral qualms that come in there? Some people see it as a massive issue, others don't believe the harm is significant. Probably makes an OSS dev enjoy their working being open source less, I imagine, which may have larger ramifications in terms of the ecosystem it promotes, but outside of that I'm guessing (I'm also trying to understand) it's just a matter of who's seeing the benefit from this tech. I think that's a reasonable thing to be concerned about, when wealth seems to have a tendency to centralize, and the average worker doesn't have the level of power we would ideally like.
Re:GitHub Copi­lot inves­ti­ga­tion by SantalBlush on Tuesday October 18, 2022 @09:19AM (#33246677)
You could say this about all software piracy. So Microsoft can work to end software copyright instead of trying to corner the market on pirated software and asking forgiveness after the fact.
Re:GitHub Copi­lot inves­ti­ga­tion by concordDance on Tuesday October 18, 2022 @10:00AM (#33247250)
No, you can't.

Because most software piracy is of saleable software. 20 line snippets are not for sale, mostly because the transaction costs are higher than the snippet value.

Re:GitHub Copi­lot inves­ti­ga­tion by trention on Tuesday October 18, 2022 @10:08AM (#33247369)
Eventually (not in the next 5 years but probably in the next 15) a system like this is going to lower the market salaries of developers (or make some of them outright unemployable). While using their own code as input to achieve that, without ever obtaining actual permission.

Seems like a pretty tangible harm to me.

Re:GitHub Copi­lot inves­ti­ga­tion by BeFlatXIII on Tuesday October 18, 2022 @10:55AM (#33248184)
> you can't just take 20 lines of completely stolen code, modify a few things, and call it your own.

Now I hope that Copilot sticks around for this exact reason: cause endless inane lawsuits claiming that actual original code was stolen and laundered through Copilot or reverse engineers going cowboy. Make it enough of a problem clogging the courts that they start dropping copyright cases.

Re:GitHub Copi­lot inves­ti­ga­tion by Test0129 on Tuesday October 18, 2022 @11:05AM (#33248362)
Copyright has a purpose. I don't mean a purpose in the Disney Hegemony sense but a real, actual purpose.

Dropping copyright cases is great if you hate proprietary code. That's fine. Open source is also powered by copyright. If we start dumping copyright cases we don't get the "well bob we may as well open source it!" We get large companies like Google just completely ignoring copyright and using open source code without attribution. What you've described (causing enough a problem in the courts) is the exact purpose of GPL. If we start dropping copyright cases altogether the open source movement may as well be dead in the water.

Re:GitHub Copi­lot inves­ti­ga­tion by woah on Wednesday October 19, 2022 @05:02PM (#33267897)
> You can't just take 20 lines of completely stolen code, modify a few things, and call it your own.

That's exactly what I said in my comment. I wouldn't take 20 lines of code, since it wouldn't actually work. Even if it was able to spit out 20 lines of correct code, they would be tailored to my codebase, and not violating copyright.

The only time you see CoPilot violating copyright is when someone coaxes it into that, in a completely empty codebase with no context. The violation of copyright is not possible when it is used as intended.

Re:GitHub Copi­lot inves­ti­ga­tion by forgotpwd16 on Tuesday October 18, 2022 @03:50AM (#33244246)
>I won't be trying to bait it into reproducing heavily copy&pasted cherrypicked examples

You don't have to bait it.

>I won't use 20 lines of its output with zero modification.

Depending on changes that may still be derivative work. The entire concept reminds me that can I copy your homework meme.

Re:GitHub Copi­lot inves­ti­ga­tion by macspoofing on Tuesday October 18, 2022 @09:29AM (#33246810)
>The only way you can get it to do that is to bait it with the function names of functions that have already been copy and pasted thousands of times onto GitHub without proper licenses.

How do you know that this is the only way for copilot to reproduce copyrighted code?

Re:GitHub Copi­lot inves­ti­ga­tion by the_gipsy on Tuesday October 18, 2022 @09:40AM (#33246956)
> I don't care that it reproduces copyrighted content.

Do you also just rip any open source code, violating the licenses? Nice.