5 ms·

Called it.

• BtM909 5y ago
  Can you get these keys by searching via a search engine?
  • erikrothoff 5y ago
    Yes. There are quite a few services that scan Github and in realtime show leaked secrets. I once found someones Gmail password that way...
  • karmasimida 5y ago
    CommonCrawl contains considerable amount of PII information if you really spend time digging, for example.
• nojito 5y ago
  The keys would be sniffed out by secret scanner anyway https://docs.github.com/en/code-security/secret-security/about-secret-scanning https://docs.github.com/en/code-security/secret-security/abo... Doesn’t make sense to implement fixes on CoPilot.
  • atraac 5y ago
    The stuff you write doesn't have to be commited to GitHub(or am I missing something?) so this argument makes no sense. Copilot clearly scanned and autocompleted third party secrets, it's in no way acceptable behaviour.
    • nojito 5y ago
      It's trained on public repos. Public repos are scanned by the secret scanner. Why is it CoPilot's responsibiity to also scan the keys too?
    • dolmen 5y ago
      The Copilot FAQ has mentions about its training set. https://copilot.github.com/ https://copilot.github.com/