5 ms·

If Microsoft is willing to put ads into your PRs via Copilot like this, imagine what they could put into your codebase itself with Copilot. Or what Microsoft c

If Microsoft is willing to put ads into your PRs via Copilot like this, imagine what they could put into your codebase itself with Copilot. Or what Microsoft could do, run, install, etc on/from your computer while running their Copilot agents. This is the same company that puts ads in your start menu and reinserts them with Windows updates even if you manually removed them.

neya 7mo ago
Imagine just having the copilot extension installed will be an excuse at some point for them to steal our code to train their AI models. Not sure if they already do this.
- justinclift 7mo ago
  "at some point"? Why the assumption it's not already happening?
  - neya 7mo ago
    > Not sure if they already do this.
- NateEag 7mo ago
  Of course they already do this. The ToS (https://www.microsoft.com/en-us/microsoft-copilot/for-individuals/termsofuse https://www.microsoft.com/en-us/microsoft-copilot/for-indivi...) says explicitly: > Copilot may include both automated and manual (human) processing of data. You shouldn’t share any information with Copilot that you don’t want us to review. so they're reserving the right to process whatever it looks at. You're sending them your codebase already, as part of the prompt for generating new snippets, debugging, etc. So they have access to it. They'd be absolute fools not to be using the results of sessions to continue to refine their models, and they already reserved the rights to look at what you send them, so yeah - they're doing it. (Bonus comedy from the ToS: > Copilot is for entertainment purposes only. The lawyers know these things cannot be trusted.)
  - neya 7mo ago
    > Copilot is for entertainment purposes only. Jokes on them, that's why I consider entire Microsoft for entertainment purposes only.
  - circuit10 7mo ago
    Also for some reason that site hijacks your scrolling and tries to "smooth" it, which just makes it feel more unresponsive as most browsers already have smooth scrolling? Looks like they're using this: https://github.com/gblazex/smoothscroll-for-websites https://github.com/gblazex/smoothscroll-for-websites I know it's a bit off topic but I'm just confused as to why that would be on there...
    - account42 7mo ago
      Web developers just can't help themselves from reinventing browser functionality, badly.
  - davidgerard 7mo ago
    That's the TOS for the broader Microsoft Copilot, not for the GitHub one, which has its own TOSes (depending whether your last renewal was before or after March 5) that don't include the "entertainment" wording. But one to file away!
henry2023 7mo ago
I wonder if there will come a time where I can pay M$ to sabotage my competition codebase
- StilesCrisis 7mo ago
  If they're using Copilot, you're already most of the way there.
- degrees57 7mo ago
  You have to get acquired by Microsoft first.
sehansen 7mo ago
"Reflections on Trusting Trust" for the new era. MSVC doesn't compile a secret master-password into your software, just a Copilot ad. ("Reflections on Trusting Trust" Turing Award Lecture by Ken Thompson: https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...)
- le-mark 7mo ago
  +1000 Everyone in technology should read this.
aiedwardyi 7mo ago
[flagged]
nulltrace 7mo ago
Spent yesterday pruning dependencies in a project. Cut half of them and everything still worked. Makes you wonder how much stuff we pull in without thinking about it. Same thing with AI-generated PRs honestly, one bad suggestion and it ships.
- whattheheckheck 7mo ago
  No linter?
cookiengineer 7mo ago
Can somebody explain to me why this is legal? If anybody but Microsoft does this, it's called malware and they'll end up with an FBI visit and prison time. Why are the judicative so skewed here in their judgements?
- whattheheckheck 7mo ago
  They have trillions

neya 7mo ago

Imagine just having the copilot extension installed will be an excuse at some point for them to steal our code to train their AI models. Not sure if they already do this.

justinclift 7mo ago
"at some point"? Why the assumption it's not already happening?
- neya 7mo ago
  > Not sure if they already do this.
NateEag 7mo ago
Of course they already do this. The ToS (https://www.microsoft.com/en-us/microsoft-copilot/for-individuals/termsofuse https://www.microsoft.com/en-us/microsoft-copilot/for-indivi...) says explicitly: > Copilot may include both automated and manual (human) processing of data. You shouldn’t share any information with Copilot that you don’t want us to review. so they're reserving the right to process whatever it looks at. You're sending them your codebase already, as part of the prompt for generating new snippets, debugging, etc. So they have access to it. They'd be absolute fools not to be using the results of sessions to continue to refine their models, and they already reserved the rights to look at what you send them, so yeah - they're doing it. (Bonus comedy from the ToS: > Copilot is for entertainment purposes only. The lawyers know these things cannot be trusted.)
- neya 7mo ago
  > Copilot is for entertainment purposes only. Jokes on them, that's why I consider entire Microsoft for entertainment purposes only.
- circuit10 7mo ago
  Also for some reason that site hijacks your scrolling and tries to "smooth" it, which just makes it feel more unresponsive as most browsers already have smooth scrolling? Looks like they're using this: https://github.com/gblazex/smoothscroll-for-websites https://github.com/gblazex/smoothscroll-for-websites I know it's a bit off topic but I'm just confused as to why that would be on there...
  - account42 7mo ago
    Web developers just can't help themselves from reinventing browser functionality, badly.
- davidgerard 7mo ago
  That's the TOS for the broader Microsoft Copilot, not for the GitHub one, which has its own TOSes (depending whether your last renewal was before or after March 5) that don't include the "entertainment" wording. But one to file away!

henry2023 7mo ago

I wonder if there will come a time where I can pay M$ to sabotage my competition codebase

StilesCrisis 7mo ago
If they're using Copilot, you're already most of the way there.
degrees57 7mo ago
You have to get acquired by Microsoft first.

sehansen 7mo ago

"Reflections on Trusting Trust" for the new era. MSVC doesn't compile a secret master-password into your software, just a Copilot ad. ("Reflections on Trusting Trust" Turing Award Lecture by Ken Thompson: https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...)

le-mark 7mo ago
+1000 Everyone in technology should read this.

aiedwardyi 7mo ago

[flagged]

nulltrace 7mo ago

Spent yesterday pruning dependencies in a project. Cut half of them and everything still worked. Makes you wonder how much stuff we pull in without thinking about it. Same thing with AI-generated PRs honestly, one bad suggestion and it ships.

whattheheckheck 7mo ago
No linter?

cookiengineer 7mo ago

Can somebody explain to me why this is legal? If anybody but Microsoft does this, it's called malware and they'll end up with an FBI visit and prison time. Why are the judicative so skewed here in their judgements?

whattheheckheck 7mo ago
They have trillions