5 ms·

So you are providing sensitive business information/facts to a third party service that's likely going to use those for training, analysis, store it, etc. ? It

So you are providing sensitive business information/facts to a third party service that's likely going to use those for training, analysis, store it, etc. ? It should be fine for most places I guess - but I suspect a decent amount will have a problem with this. This is my main reservation about copilot as well (quality issues aside).

RhodesianHunter 4y ago
I didn't think copilot was actually sending your source code back to GitHub? It's trained on OSS.
- popinman322 4y ago
  Snippets of your local code are sent to the API as part of the Copilot request context.
  - wprl 4y ago
    When I looked into this a little bit, I found Copilot for Business states they do not record any of the info you send them. Though obviously you are still sending out code to a third party. I could not find any info about their policies for “normal” Copilot which I assume means they are recording all the code sent to it and using our code to further train the model.
    - tfigment 4y ago
      Still hard to trust. Many companies save info for training/qa purposes and hide details in obscure language. Voice assistants for example. Didn't Roomba get in trouble recently regarding photos uploaded and then shared with contractors for qa that ultimately shared the embarrasing photos more publicly.
- rom-antics 4y ago
  Copilot sends chunks of your code to the server for every suggestion (whether or not you accept it). That's the only way it could possibly work, since the model is running on a remote server. https://thakkarparth007.github.io/copilot-explorer/posts/copilot-internals https://thakkarparth007.github.io/copilot-explorer/posts/cop...
rcme 4y ago
> So you are providing sensitive business information/facts to a third party service that's likely going to use those for training, analysis, store it, etc. ? Every business needs to make their own decision. Personally, I’m not worried about OpenAI using my data, but I understand others might be. That being said, I already give Amazon literally all my data about my business via AWS and Google gets a copy of all my documents, so providing this data isn’t entirely unprecedented.
- _Algernon_ 4y ago
  The difference is that GPT is training future versions based on the information you provide. It could potentially be returned to a future user. AWS does no such thing.
  - flanked-evergl 4y ago
    > The difference is that GPT is training future versions based on the information you provide. Do they say so in their T&C or elsewhere, and if not how do you know?
    - jeffbee 4y ago
      Would have been easier to read the T&C than to post this comment. The answer is yes. OpenAI specifically says in their T&C that your content will be used to train their models.
      - _Algernon_ 4y ago
        Not only that, it also gives a popup that states this clearly, as well as a request to not input confidential information when you first start using it. Do people just not read anymore?
        morelisp 4y ago
        > Do people just not read anymore? Well, you're in a thread that's fundamentally about how people just don't write anymore...
sam0x17 4y ago
Fair, but if you're writing a communication where you care about wording, it's probably going to be public or semi-public anyway
- yakak 4y ago
  Something internal that doesnt need to be understood can usually just not be written in the kinds of organizations I'm familiar with. Writing because something written is required is usually for the public, cross-organizational or government.
random_kris 4y ago
I hope I never have to work at place like this
- deleted 4y ago
  [deleted]

RhodesianHunter 4y ago

I didn't think copilot was actually sending your source code back to GitHub? It's trained on OSS.

popinman322 4y ago
Snippets of your local code are sent to the API as part of the Copilot request context.
- wprl 4y ago
  When I looked into this a little bit, I found Copilot for Business states they do not record any of the info you send them. Though obviously you are still sending out code to a third party. I could not find any info about their policies for “normal” Copilot which I assume means they are recording all the code sent to it and using our code to further train the model.
  - tfigment 4y ago
    Still hard to trust. Many companies save info for training/qa purposes and hide details in obscure language. Voice assistants for example. Didn't Roomba get in trouble recently regarding photos uploaded and then shared with contractors for qa that ultimately shared the embarrasing photos more publicly.
rom-antics 4y ago
Copilot sends chunks of your code to the server for every suggestion (whether or not you accept it). That's the only way it could possibly work, since the model is running on a remote server. https://thakkarparth007.github.io/copilot-explorer/posts/copilot-internals https://thakkarparth007.github.io/copilot-explorer/posts/cop...

rcme 4y ago

> So you are providing sensitive business information/facts to a third party service that's likely going to use those for training, analysis, store it, etc. ? Every business needs to make their own decision. Personally, I’m not worried about OpenAI using my data, but I understand others might be. That being said, I already give Amazon literally all my data about my business via AWS and Google gets a copy of all my documents, so providing this data isn’t entirely unprecedented.

_Algernon_ 4y ago
The difference is that GPT is training future versions based on the information you provide. It could potentially be returned to a future user. AWS does no such thing.
- flanked-evergl 4y ago
  > The difference is that GPT is training future versions based on the information you provide. Do they say so in their T&C or elsewhere, and if not how do you know?
  - jeffbee 4y ago
    Would have been easier to read the T&C than to post this comment. The answer is yes. OpenAI specifically says in their T&C that your content will be used to train their models.
    - _Algernon_ 4y ago
      Not only that, it also gives a popup that states this clearly, as well as a request to not input confidential information when you first start using it. Do people just not read anymore?
      - morelisp 4y ago
        > Do people just not read anymore? Well, you're in a thread that's fundamentally about how people just don't write anymore...

sam0x17 4y ago

Fair, but if you're writing a communication where you care about wording, it's probably going to be public or semi-public anyway

yakak 4y ago
Something internal that doesnt need to be understood can usually just not be written in the kinds of organizations I'm familiar with. Writing because something written is required is usually for the public, cross-organizational or government.

random_kris 4y ago

I hope I never have to work at place like this

deleted 4y ago
[deleted]