Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Updates to GitHub Copilot interaction data usage policy

github.blog

Post reply on HN
Print view View original

91–100 of 193 posts

Re: Updates to GitHub Copilot interaction data usage policy

#91

Post by data-ottawa »

stefankuehnel wrote: post #18

If you scroll down to "Allow GitHub to use my data for AI model training" in GitHub settings, you can enable or disable it. However, what really gets me is how they pitch it like it’s some kind of user-facing feature: Enabled = You will have access to the feature Disabled = You won't have access to the feature As if handing over your data for free is a perk. Kinda hilarious.

It’s not so bad, there’s no double negative and it’s not a confusing “switch” that is always ambiguous as to whether it’s enabled or not.

In contrast when you create a a GCS bucket it uses a checkmark for enabling “public access prevention”. Who designed that modal? It takes me a solid minute to figure out if I’m publishing private data or not.

Re: Updates to GitHub Copilot interaction data usage policy

#92

Post by LadyCailin »

pred_ wrote: post #58

What is the legal basis of this in the EU? Ignoring the fact they could end up stealing IP, it seems like the collected information could easily contain PII, and consent would have to be > freely given, specific, informed and unambiguous. In order to obtain freely given consent, it must be given on a voluntary basis.

I actually don’t seem to have this option on my GitHub settings page, which leads me to wonder if this only applies to Americans.

Re: Updates to GitHub Copilot interaction data usage policy

#93

Post by LauraMedia »

LadyCailin wrote: post #92
pred_ wrote: post #58

What is the legal basis of this in the EU? Ignoring the fact they could end up stealing IP, it seems like the collected information could easily contain PII, and consent would have to be > freely given, specific, informed and unambiguous. In order to obtain freely given consent, it must be given on a voluntary basis.

I actually don’t seem to have this option on my GitHub settings page, which leads me to wonder if this only applies to Americans.

I actually did have to manually disable this from Germany, so it might be a different reason you don't have it?

Re: Updates to GitHub Copilot interaction data usage policy

#94

Post by malnourish »

QuadrupleA wrote: post #79

Fun fact: Copilot gives you no way to ignore sensitive files with API keys, passwords, DB credentials, etc.: https://github.com/orgs/community/discussions/11254#discussi... So by default you send all this to Microsoft by opening your IDE.

I swear I just set up enterprise and org level ignore paths.

Re: Updates to GitHub Copilot interaction data usage policy

#95

Post by parkersweb »

aksss wrote: post #86
parkersweb wrote: post #66

Earlier quoted context omitted.

Yes - not impressed at all that this is opt-in default for business users. We have a policy in place with clients that code we write for them won’t be used in AI training - so expecting us to opt out isn’t an acceptable approach for a business relationship where the expectation is security and privacy.

It is not opt-in by default for business users. The feature flag doesn't show in org policies and github states that it's not scoped to business users.

Gah - you’re right - but given that I don’t use personal copilot - but I do manage an organisation that gives copilot to some of our developers AND I was sent an email this evening making no mention at all of business copilot being excluded it could definitely have been communicated better…

Re: Updates to GitHub Copilot interaction data usage policy

#96

Post by veverkap »

malnourish wrote: post #94
QuadrupleA wrote: post #79

Fun fact: Copilot gives you no way to ignore sensitive files with API keys, passwords, DB credentials, etc.: https://github.com/orgs/community/discussions/11254#discussi... So by default you send all this to Microsoft by opening your IDE.

I swear I just set up enterprise and org level ignore paths.

Yeah, it's a Copilot Business/Enterprise feature

Re: Updates to GitHub Copilot interaction data usage policy

#97

Post by 0xbadcafebee »

QuadrupleA wrote: post #79

Fun fact: Copilot gives you no way to ignore sensitive files with API keys, passwords, DB credentials, etc.: https://github.com/orgs/community/discussions/11254#discussi... So by default you send all this to Microsoft by opening your IDE.

Separate fun fact: Gemini CLI blocks env vars with strings like 'AUTH' in the name. They have two separate configuration options that both let you allow specific env vars. Neither work (bad vibe coding). Tried opening an issue and a PR, and two separate vibe-coding bots picked up my issue and wrote PRs, but nobody has looked at them. Bug's still there, so can't do git code signing via ssh agent socket. Only choice is to do the less-secure, not-signed git commits.

On top of that, Gemini 3 refuses to refactor open source code, even if you fork it, if Gemini thinks your changes would violate the spirit of the intent of the original developers in a safety/security context. Even if you think you're actually making it more secure, but Gemini doesn't, it won't write your code.

Re: Updates to GitHub Copilot interaction data usage policy

#98

Post by eipi10_hn »

0x3f wrote: post #46
rvz wrote: post #15

> From April 24 onward, interaction data—specifically inputs, outputs, code snippets, and associated context—from Copilot Free, Pro, and Pro+ users will be used to train and improve our AI models unless they opt out. Now is the time to run off of GitHub and consider Codeberg or self hosting like I said before. [0] [0] https://news.ycombinator.com/item?id=22867803

Codeberg doesn't support non OSS and I'd rather just have one 'git' thing I have to know for both OSS and private work. So it's not a great option, IMO. Self-hosting also for other reasons. I'm not sure there are any good GitHub alternatives. I don't trust Gitlab either. Their landing page title currently starts with "Finally, AI". Eek.

Maybe sourcehut? https://sourcehut.org

Re: Updates to GitHub Copilot interaction data usage policy

#100

Post by UqWBcuFx6NV4r »

rzmmm wrote: post #69
mirekrusin wrote: post #63

Earlier quoted context omitted.

The feature is that your coding style will be in next models!

I wish my GPL license would transit along with my code.

If you are wholly confident that model training is a violation of the GPL then go sue.
Post reply on HN