Security Weaknesses of Copilot Generated Code in GitHub

Re:Security Weaknesses of Copilot Generated Code in GitHub by squigz on Wednesday October 04, 2023 @08:53PM (#37773665)

I'm not sure that code being newer inherently means it will be more secure

[ Parent | on HN ]

Re:Security Weaknesses of Copilot Generated Code in GitHub by pylua on Wednesday October 04, 2023 @09:07PM (#37773771)

I don’t think it is a tautology , but I can imagine a cve scanner picking up older code with log4j where newer code may avoid that library altogether, just as an example.

Since there is more older code than newer code would the llm be suspectible to that ?

[ Parent | on HN ]

Re:Security Weaknesses of Copilot Generated Code in GitHub by xmcqdpt2 on Thursday October 05, 2023 @07:20AM (#37777166)

Everyone still uses log4j after the fix. There aren't many full-featured alternatives... and the one that exist probably contain unfixed bugs.

[ Parent | on HN ]