prosim

Like Copilot CLI, but now Copilot also has a desktop app. Next to github.com, GitHub Desktop, GitHub Mobile, and Copilot in VS Code, somebody will explain the strategy of this... one day.

tl;dr: Vuln only possible by placing Copilot into YOLO mode. And it's fixed with the August Patch Tuesday release.

To quote from the article: "These repositories, belonging to more than 16,000 organizations, were originally posted to GitHub as public, but were later set to private [..]" Once things are public, they will forever remain public (in some form). That's how the internet works.

Flagged yesterday already. Still a non-story today: https://news.ycombinator.com/item?id=43183333

tl;dr Bing indexed and cached a public repository, then made it available to its AI chat. Later, the repository author switched the repository to private and understood how the internet works. And the story gets only better as the author is the founder of a “cybersecurity” company.

Is this a fork of https://github.com/intitni/CopilotForXcode? OSS under MIT license, which CoderKit is not.

He started at GitHub 3 years after the article was written. Don't think GitHub's interview process takes that long. ;)

Except the article is dated in URL and sidebar to July 5, 2021.

Depends on how you define "embrace". Services like Ubicloud violate the GitHub Terms of Service.

Footnote 1 on page 2 explicitly mentions the 3.5 model and the research in this paper is only about auto completion: https://arxiv.org/pdf/2306.15033.pdf

And this blog post states “beyond Codex”, again for auto completion: https://github.blog/2023-07-28-smarter-more-efficient-coding...

Lastly, OpenAI states on the original Codex page: “OpenAI Codex is a descendant of GPT-3; its training data contains both natural language and billions of lines of source code from publicly available sources, including code in public GitHub repositories.” - It included GitHub repos, but it never was only GitHub repos. https://openai.com/blog/openai-codex

Update: GitHub Community Manager confirms it here: https://github.com/orgs/community/discussions/56975#discussi...

That’s no longer true. Copilot uses the same ChatGPT-3.5 model as, well, ChatGPT. If it were trained on just GitHub projects, the chat features wouldn’t work at all.

They did not prompt at all. They used GitHub’s code search to find projects where the repo owner specified that the code was generated “by Copilot” and the authors took that at face value for all code in the project. Whether the code was actually suggested by Copilot is not at all analyzed in the paper. As such, the results are highly questionable.

Your private code is not used for any user other than you: https://docs.github.com/en/enterprise-cloud@latest/copilot/o...