Live data from Hacker News

If you don't opt out by Apr 24 GitHub will train on your private repos

news.ycombinator.com

251–260 of 346 posts

Re: If you don't opt out by Apr 24 GitHub will train on your private repos

#251

No we won’t. Details here https://github.blog/news-insights/company-news/updates-to-gi... For users of Free, Pro and Pro+ Copilot, if you don’t opt out then we will start collecting usage data of Copilot for use in model training. If you are a subscriber for Business or Pro we do not train on usage. The blog post covers more details but we do not train on private repo data at rest, just interaction data with Copilot.…

I think the problem is more with using PRIVATE repos. My letters are also private and I would be pretty pissed if the mail carrier was reading them. Why does GitHub think it has the right to do this?

[deleted]

Re: If you don't opt out by Apr 24 GitHub will train on your private repos

#253
post #231
post #97

Earlier quoted context omitted.

In the EU, opt-out is not a legally valid way to obtain the necessary consent. How do you plan to handle this?

For personal data. I don't believe you can reasonably claim code is personal data any more than a hammer is your personal data.

Every Git commit is likely to contain personal data, in the form of the author’s name and email address usually present in a commit’s metadata. Furthermore, unless GitHub is prohibiting users from submitting personal data via their ToS (which, given the above, would be impractical), the only thing that matters is whether the data in fact contains personal data or not. GitHub cannot just assume that it doesn’t. And processing that data for new purposes requires user consent.

Re: If you don't opt out by Apr 24 GitHub will train on your private repos

#257

No we won’t. Details here https://github.blog/news-insights/company-news/updates-to-gi... For users of Free, Pro and Pro+ Copilot, if you don’t opt out then we will start collecting usage data of Copilot for use in model training. If you are a subscriber for Business or Pro we do not train on usage. The blog post covers more details but we do not train on private repo data at rest, just interaction data with Copilot.…

>Hope that helps

Honestly, what the fuck? This changes was already pretty bad but this being the apparent corporate response is insane.

Done with Github and Microsoft after this. Just disgusting how little you care for users, ethics, or morals.

Re: If you don't opt out by Apr 24 GitHub will train on your private repos

#258
post #231
post #97

Earlier quoted context omitted.

In the EU, opt-out is not a legally valid way to obtain the necessary consent. How do you plan to handle this?

For personal data. I don't believe you can reasonably claim code is personal data any more than a hammer is your personal data.

Code often contains personal data. Here are over 400 files on GitHub with email addresses:

https://grep.app/search?regexp=true&q=%5Ba-z%5D%7B8%2C%7D%5C...

For example, license files often contain names and many package managers require a contact person.

When this goes to court, GitHub will probably make the excuse that they somehow did not know that people upload personal data, but the fact that this happens so often that they had to make a secret scanner to stop people from uploading their private keys will prove them as liars.

Re: If you don't opt out by Apr 24 GitHub will train on your private repos

#259
post #12

I've been saying this since 2023 > If your data is stored in a database that a company can freely read and access (i.e. not end-to-end encrypted), the company will eventually update their ToS so they can use your data for AI training — the incentives are too strong to resist https://news.ycombinator.com/item?id=37124188

You're right, of course, and I find it frustrating that people are so thick as to not see your claim as obvious. Stallman is always right.

> Stallman is always right.

Not really. Almost always right....

Post reply on HN