3 ms·
This is a difficult question to answer as one team might be very different from another team. However, (my opinion only follows) I think our paper shows that t
by kiwih 5y ago
This is a difficult question to answer as one team might be very different from another team.
However, (my opinion only follows) I think our paper shows that there is a danger for Copilot to suggest insecure code - and inexperienced / security non-aware developers may accept these suggestions without understanding the implications, whereas if they had to write the code from scratch then they might (?) not make the mistakes (as they need to put in more effort, meaning there might be a higher chance they stumble upon the right approach - e.g. if they ask an experienced developer for help).
- verdverm 5y agoFor non copilot, the words around the code found on stack overflow or a blog post may indicate the lack of correct security, which would be a signal to a developer that they need to consider something further.