22 ms·

I don't consider this a problem. Copilot was trained on public repos, so these secrets had to be checked into public repos. They were already totally public, an

I don't consider this a problem. Copilot was trained on public repos, so these secrets had to be checked into public repos. They were already totally public, and should have been invalidated/replaced and redacted. Copilot might result in previously undiscovered published secrets being found, but that's not much worse than anyone finding one under normal circumstances.

intricatedetail 5y ago
Have they produced evidence it was trained only on public repos? They should release the model and tooling so we can verify that.
- treesprite82 5y ago
  The easiest way to test this would probably be to try to get it to generate code/secrets that appear only in private repos.
deleted 5y ago
[deleted]