Claim: Private GitHub repos included in AI dataset

Re:Claim: Private GitHub repos included in AI dataset by simonw on Wednesday March 20, 2024 @03:21PM (#39770887)

This is a really big claim. I think we need specifics on this - I'm inclined to think this is people not understanding the GitHub public/private repo model (or misremembering the history of their repos) over GitHub deliberately leaking private code to third parties.

[ Parent | on HN ]

Re:Claim: Private GitHub repos included in AI dataset by latexr on Wednesday March 20, 2024 @03:23PM (#39770917)

I agree that might be the case. Since I do not personally know the author, I elected to use “may” in the submission title. Hopefully we get a definitive answer from those involved.

Still, the post continues to be useful for those who want to opt-out regardless.

[ Parent | on HN ]

Re:Claim: Private GitHub repos included in AI dataset by politelemon on Wednesday March 20, 2024 @03:43PM (#39771150)

I would use "claim" rather than may until it's substantiated.

[ Parent | on HN ]

Re:Claim: Private GitHub repos included in AI dataset by latexr on Wednesday March 20, 2024 @04:18PM (#39771534)

Reads a bit weirder, but changed.

[ Parent | on HN ]

Re:Claim: Private GitHub repos included in AI dataset by ametrau on Wednesday March 20, 2024 @03:25PM (#39770939)

I have personally experienced this. The person who did it didn’t realise the significance of the repo being “public only for a couple of hours”. I’m also inclined to believe it’s misremembering / misconfiguring.

[ Parent | on HN ]

Re:Claim: Private GitHub repos included in AI dataset by treffer on Wednesday March 20, 2024 @03:25PM (#39770938)

I would give it a 50:50 chance.

The other option is that the scraper got lucky with a tiny glitch (whatsoever).

On the one hand I bet github does everything to keep stuff secure, on the other hand I can't believe there wasn't a single glitch in the last few years.

And if there was a glitch then regular automated scrapers are a pretty likely siphon.

Heck I should check if any of my private repository show up.....

[ Parent | on HN ]

Re:Claim: Private GitHub repos included in AI dataset by rfoo on Wednesday March 20, 2024 @03:27PM (#39770961)

> a tiny glitch

That's not "a tiny glitch". What you described is "GitHub may show your private repo to strangers randomly" which is a even more serious issue than they appearing in an archive some time later.

[ Parent | on HN ]

Re:Claim: Private GitHub repos included in AI dataset by simonw on Wednesday March 20, 2024 @04:05PM (#39771390)

Right: exposing private source code in this way is a showstopper bug for GitHub, and a major scandal if they've been covering it up.

A lot of companies pay GitHub a LOT of money to securely host their code. A breach like this is a way bigger story than just another "AI is training on your data!" thing.

I continue to doubt that private repos being exposed like this actually happened here.

[ Parent | on HN ]