Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub Copilot X – Sign up for technical preview

github.blog

Post reply on HN
Print view View original

561–570 of 771 posts

Re: GitHub Copilot X – Sign up for technical preview

#561

Post by pleb_nz »

istjohn wrote: post #432
pleb_nz wrote: post #418

Earlier quoted context omitted.

Companies are there to make money. If the same job currently dinner by 5 people can now be done by 3, and it means more profit for shareholders, what do you think shareholder will want? While profit is the main driver, it'll mean smaller teams Not today, not with current tech, maybe in the near future though

But just like building more roads induces more demand by making driving more attractive, this will lower the cost of custom software development and create new demand. Perhaps one day soon it will be affordable for every company of every size to have a fully custom ERP solution instead of shoehorning their business processes into Salesforce or the like. Perhaps every family will have a custom app managing their house…

Are you saying don't worry, don't have a fallback plan, everything will be honky dory?

Re: GitHub Copilot X – Sign up for technical preview

#562

Post by Borgz »

filmgirlcw wrote: post #119
w-m wrote: post #33

I tried getting myself on the CLI waitlist ( https://githubnext.com/projects/copilot-cli/ ). That they use ffmpeg as the example hits a huge pain point for me. But: "Next Waitlist by GitHub Next would like permission to: Act on your behalf Not owned or operated by GitHub" Why does signing up for a waitlist require me to give permissions to an app to act in my account? An app that isn't even officially from GitHub? Th…

It’s officially from GitHub. There is some weird language (that I’ll absolutely pass feedback on to the team), I think because GitHub Next is a different organization from GitHub proper, but I can assure you, this is an official GitHub app. But I totally agree that this isn’t a great/clear message about where this is from.

Unfortunately, I think this is another indication of a lack of understanding by GitHub of how their OAuth/GitHub App systems are expected to function by end users.

I'm reminded of this incident [1] from a few months ago. Allegedly, a malicious actor abused GitHub's poorly designed OAuth permissions to obtain up to 500 stars from developers without their consent, all thanks to a "sign in with GitHub" button and a flawed consent screen that did not communicate what the victims were consenting to. Even worse, GitHub allegedly decided to suspend at least one victim's account.

We're left with a number of questions:

1. Why does GitHub give third-party apps permission to star repos when it is apparently against the terms of service to automate such an action?

2. Why does GitHub lump this permission in with public_repo, a scope that grants read and write access to all public repositories? [2]

3. Why does the consent UI for this scope display simply as

    Repositories
    Public repositories
and not even mention that this grants write access unless the user clicks on it? [3] (it also doesn't mention that it gives permission to star repos)

4. Why does GitHub punish victims with account suspension for being tricked into giving consent to malicious apps?

It is good that GitHub is taking some steps to improve account security, such as fine-grained personal access tokens and mandatory 2FA. But these improvements do not seem to be extending to the OAuth system. The GitHub App system, while better in that it has granular permissions, is also flawed with its mysterious "act on your behalf" consent UI. [4] [5]

[1]: https://news.ycombinator.com/item?id=33917962

[2]: https://docs.github.com/en/developers/apps/building-oauth-ap...

[3]: https://news.ycombinator.com/item?id=33919481

[4]: https://github.com/community/community/discussions/37117

[5]: https://github.com/cirruslabs/cirrus-ci-docs/issues/751

Re: GitHub Copilot X – Sign up for technical preview

#564

Post by amelius »

bigmattystyles wrote: post #489
gzer0 wrote: post #169

There are 5 different sign-up waiting lists. Each one needs to be signed-up for separately. [1] Copilot X: https://github.com/github-copilot/chat_waitlist_signup/ [2] Copilot Voice: https://githubnext.com/projects/copilot-voice/ [3] Copilot Docs: https://githubnext.com/projects/copilot-for-docs/ [4] Copilot for PRs: https://githubnext.com/projects/copilot-for-pull-requests/ [5] Copilot CLI: https://githubnext.com/pro…

Soon - Introducing Copilot Copilot - to help you navigate the Copilot offerings.

Coco-pilot, with a mascot that looks like Bonzi buddy in an airplane.

Re: GitHub Copilot X – Sign up for technical preview

#565

Post by whimsicalism »

Terretta wrote: post #557
jjeaff wrote: post #541

Earlier quoted context omitted.

$99 plus 15-30% of everything you create.

Try selling through Amazon.com and see what % you keep. Then try selling through a grocery or drugstore chain.

The difference being I can always walk to a different grocery store without having to pay ~$1k.

Re: GitHub Copilot X – Sign up for technical preview

#566

Post by insane_dreamer »

jackosdev wrote: post #277
gonehome wrote: post #261

Earlier quoted context omitted.

They’re strategically exceptional, but beyond that a lot of their products (or subsidiaries) are also dominant for good reason (vscode, GitHub). O365 and the product integration there (teams) is why they crushed slack despite slack’s headstart. Slack sold out to languish at salesforce while Microsoft will now just own that space. Cherry picking a Microsoft app for macOS is like looking at iTunes on windows, it’s not…

vscode is an incredible piece of software, better than all the paid options in my opinion, the amount of features they pump out month to month is outstanding, just a bit slow due to electron. I never understood why they put so much effort into a free product that I run from Linux and Mac, but I'm happily paying the copilot subscription so it all makes sense now.

better than PyCharm for python?

Re: GitHub Copilot X – Sign up for technical preview

#568

Post by DeathArrow »

tootie wrote: post #158
ren_engineer wrote: post #13

Microsoft really seems to have wrapped up the developer ecosystem with VS Code and the Github acquisition combined with OpenAI. They are going to have an absurd amount of data to optimize their models thanks to that, not sure how other AI focused companies can overcome that have to wonder at what point developers remember how anti-developer Microsoft used to be and potentially move away from their ecosystem. Credit t…

I'm a fanboy of heavy IDEs with big fat debuggers like JetBrains tools. It's ironic that Microsoft who used to dominate that niche, is now dominating with a glorified text editor.

There are still lots of people using Visual Studio.

Re: GitHub Copilot X – Sign up for technical preview

#569

Post by brookst »

belorn wrote: post #443
brookst wrote: post #147

Earlier quoted context omitted.

Isn’t software copyrighted as a whole, not line-by-line?

As the linked article describe it: "the office said copyright protection depends on whether AI's contributions are "the result of mechanical reproduction," such as in response to text prompts, or if they reflect the author's "own mental conception."" So if we take that into software development, the text input that the developer gave copilot may be protected under copyright but the output of copilot may not. If the d…

I don't think there's any precedent for copyright to be applied partially, with some of a work covered and some not. Are you proposing that copyright will change to be line-by-lien, with each one covered (or not) depending on how it was generated?

Re: GitHub Copilot X – Sign up for technical preview

#570

Post by insane_dreamer »

mplanchard wrote: post #442
madisp wrote: post #271

Earlier quoted context omitted.

I use GitHub so not really a concern for me, they have my code already.

IIRC they didn’t train on private repos though, so using copilot in a private (github) repo will potentially open up your proprietary code to being used in that way.

No, the model doesn't train on your private code (which is good but also somewhat limiting as in my experience it doesn't provide useful answers that are very specific to your codebase); it's good for generic code though and saves time looking stuff up.
Post reply on HN