prosim

Like Copilot CLI, but now Copilot also has a desktop app. Next to github.com, GitHub Desktop, GitHub Mobile, and Copilot in VS Code, somebody will explain the strategy of this... one day.

tl;dr: Vuln only possible by placing Copilot into YOLO mode. And it's fixed with the August Patch Tuesday release.

To quote from the article: "These repositories, belonging to more than 16,000 organizations, were originally posted to GitHub as public, but were later set to private [..]" Once things are public, they will forever remain public (in some form). That's how the internet works.

tl;dr Bing indexed and cached a public repository, then made it available to its AI chat. Later, the repository author switched the repository to private and understood how the internet works. And the story gets only better as the author is the founder of a “cybersecurity” company.

He started at GitHub 3 years after the article was written. Don't think GitHub's interview process takes that long. ;)

Except the article is dated in URL and sidebar to July 5, 2021.

Depends on how you define "embrace". Services like Ubicloud violate the GitHub Terms of Service.