GitHub Copilot update includes security vulnerability filtering

erek

8=D
2FA
Joined
Dec 19, 2005
Messages
18,305
"GitHub says the controversial AI-assisted coding tool is now being used by more than 400 organizations to increase developer productivity and improve code quality."

"GitHub this week also announced the general availability of Github Copilot for Business for all enterprises, even those that do not use GitHub. This announcement follows a beta phase that began in December. Businesses can sign up for Copilot and immediately assign seats. Also featured in GitHub Copilot for Businesses is VPN proxy support, so it is possible to use Copilot in any working environment.

Since its introduction in June 2021, Copilot has come under fire, with questions raised about the propriety of using publicly available code to train the AI. These concerns prompted a lawsuit and protests from the Free Software Foundation. But GitHub said this week that more than 400 organizations already are using."

Source: https://www.infoworld.com/article/3...ncludes-security-vulnerability-filtering.html
 
“Microsoft loves open source” Embrace.

“MSFT purchases GitHub the largest host of open source code projects” Extend.

“Copilot is trained on all of GitHubs repositories - including those licensed in ways to prevent inclusion in closed source software - and spits out licensed code verbatim” Extinguish.
 
Part of that statement is strange:
It requires running software that is not free/libre (Visual Studio, or parts of Visual Studio Code)
Visual studio has a free version that lat you
install plugin (like Copilot) for free for a very long time, Visual Studio code is free and it does not require them at all, co-pilot work on JetBrrains and NeoVim (an extremely open source ide), maybe I do not understand what they mean by free, but it seem to me that if NeoVim isn't free software that it is putting the bar quite high.


There is obviously a lot of good question around co-pilot, but the part that it will cost money to use at first does seem perfectly ok (it cost a fortune to run the servers currently that why google took a it, it could reduce the profitability of search engine by a lot for a decade).

For code that was hosted on github itself, copyright infringement seem impossible, the term of service the user agreed too made it really clear that it would be use to train co-pilot and there was a mountain of easy alternative to github:
https://docs.github.com/en/site-policy/github-terms/github-terms-of-service

And the fact that one of the reason to own it was to make intellisense type of feature better was known I would imagine to almost every users (who did not knew ?).

Question for source outside github would be more interesting I imagine, it would be hard to argue that co-pilot did nothing transformative
 
Last edited:
“Microsoft loves open source” Embrace.

“MSFT purchases GitHub the largest host of open source code projects” Extend.

“Copilot is trained on all of GitHubs repositories - including those licensed in ways to prevent inclusion in closed source software - and spits out licensed code verbatim” Extinguish.
good point tbh
 
Part of that statement is strange:
It requires running software that is not free/libre (Visual Studio, or parts of Visual Studio Code)
Visual studio has a free version that lat you
install plugin (like Copilot) for free for a very long time, Visual Studio code is free and it does not require them at all, co-pilot work on JetBrrains and NeoVim (an extremely open source ide), maybe I do not understand what they mean by free, but it seem to me that if NeoVim isn't free software that it is putting the bar quite high.


There is obviously a lot of good question around co-pilot, but the part that it will cost money to use at first does seem perfectly ok (it cost a fortune to run the servers currently that why google took a it, it could reduce the profitability of search engine by a lot for a decade).

For code that was hosted on github itself, copyright infringement seem impossible, the term of service the user agreed too made it really clear that it would be use to train co-pilot and there was a moutain of easy alternative to github:
https://docs.github.com/en/site-policy/github-terms/github-terms-of-service

And the fact that one of the reason to own it was to make intellisense type of feature better was known I would imagine to almost every users (who did not knew ?).

Question for source outside github would be more interesting I imagine, it would be hard to argue that co-pilot did nothing transformative

Was going to say. I've been using the Community Edition since it came out. There is no difference between it and Visual Studio Professional.
 
  • Like
Reactions: erek
like this
Back
Top