Live data from Hacker News

Ask HN: Any indications Copilot scans your local files?

news.ycombinator.com

31–40 of 88 posts

Re: Ask HN: Any indications Copilot scans your local files?

#31

Earlier quoted context omitted.

I’m assuming you meant “blurb” instead of “blur”?

Thanks corrected. While we are at it. Is it "make the following experiment" or "do the following experiment" ?

Conduct the following experiment

Re: Ask HN: Any indications Copilot scans your local files?

#32

Have you considered that your marketing blurb is actually, not that novel after all? GPT3 is damn convincing these days :)

This is a joke, but it may be the correct answer: if the company name is self-demonstrating, it's possible Codex could recognize that.

Re: Ask HN: Any indications Copilot scans your local files?

#33

Yes, other files open in your IDE may also be scanned. From terms of service [1] (Which I'm sure everyone reads) > when you edit files with the GitHub Copilot extension/plugin enabled, file content snippets [...] will be shared with GitHub, Microsoft, and OpenAI, and used for diagnostic purposes to improve suggestions and related products. GitHub Copilot relies on file content for context, both in the file you are ed…

Last time I checked it was not implemented yet though. Maybe they are starting to deploy a version that use the other open files for context, but mine is obviously not doing that yet.

Re: Ask HN: Any indications Copilot scans your local files?

#34
post #21

Have you told your client that you are making use of tools that upload the intellectual property they’ve shared with you / they’ve paid you to create for them, onto third-party servers? If I was paying for work and the contractor was uploading the end result onto some sort of shared AI training set, we would not be working together for very long. You may have brought up an excellent point that needs to be inserted in…

[deleted]

Re: Ask HN: Any indications Copilot scans your local files?

#35
post #26
post #21

Have you told your client that you are making use of tools that upload the intellectual property they’ve shared with you / they’ve paid you to create for them, onto third-party servers? If I was paying for work and the contractor was uploading the end result onto some sort of shared AI training set, we would not be working together for very long. You may have brought up an excellent point that needs to be inserted in…

> Have you told your client that you are making use of tools that upload the intellectual property they’ve shared with you / they’ve paid you to create for them, onto third-party servers? Related: Have any of the big tech companies banned their employees from using Copilot yet?

Mine has. I work for a big tech company, and the team which approves / denies third-party software denied us to use Copilot. The given reason was that we don't want it to use our code to train its algorithms. I'm not sure how true that is, but it's what we have been told at the moment.

Re: Ask HN: Any indications Copilot scans your local files?

#36
post #14

Earlier quoted context omitted.

Good point again, but no. MacOS.

If VSCode scanned your files to feed Copilot, it's not just Microsoft who can access that, but anyone using copilot. Every single file in every single machine that ever ran VSCode would potentially be at anyone's grasp. Allowing this to happen would've been incredibly stupid. But it's worth investigating further.

> Every single file in every single machine that ever ran VSCode would potentially be at anyone's grasp.

Even if they were scanning all the files, Copilot's terms [1] explicitly says they do not use the data to provide suggestions for other users.

> GitHub Copilot does not use these URLs, file paths, or snippets collected in your telemetry as suggestions for other users of GitHub Copilot. This information is treated as confidential information and accessed on a need-to-know basis.

[1] https://docs.github.com/en/github/copilot/github-copilot-tel...

Re: Ask HN: Any indications Copilot scans your local files?

#37
Is the name of the company unique and very random or something more in the trend of "WeatherForecastsForFishermen Inc"?

Are you sure the AI couldn't get some context from the current file? No title tag in the head, no description nor keywords ? The filename/path is also used, could it be it?

Re: Ask HN: Any indications Copilot scans your local files?

#38
I noticed a very peculiar thing with copilot.

I was writing a twitter api wrapper and had hardcoded access token for a test user. Copilot when testing a function that requires a user id suggested one. I searched the id and it belonged to my test user. I searched my entire codebase but couldn't find any place I had used the particular id. The only place it could have extracted it from would have been access token which has user id as part of the string(which I hadn't noticed before this). Either this is a common code pattern or I don't know how to process this.

Re: Ask HN: Any indications Copilot scans your local files?

#39
It's crazy to me that amongst the many things I need to create legal blankets over when hiring developers, I now need to worry about what IDE they are using because Copilot ostensibly has access to their (our) source code, files, and other proprietary information.
Post reply on HN