c/technology · by BrikoX@lemmy.zip · 158d

GitHub hits CTRL-Z, decides it will train its AI with user data after all

https://www.theregister.com/2026/03/26/github_ai_training_policy_changes/

As of April 24 you'll be feeding the Octocat unless you opt out

179 points · 19 comments · view on lemmy.world

19 Comments

driving_crooner@lemmy.eco.br · 41 pts · 158d (1 reply)

What if people start sending malicious code to github? Poisoning the AI model

poop@lemmy.zip · 10 pts · 158d

That's what I tell myself I'm doing when I push more poorly written code to one of my repos

artwork@lemmy.world · 33 pts · 158d (3 replies)

The data GitHub wants includes:

- Model outputs that have been accepted or modified;
- Model inputs including code snippets shown;
- Code context surrounding your cursor position;
- Comments and documentation you've written;
- File names and repo structure;
- Interactions with Copilot features (e.g. chats); and
- Feedback (e.g. thumbs up/down ratings)...

As the FAQs explain: "If a Copilot user has their settings set to enable model training on their interaction data, code snippets from private repositories can be collected and used for model training while the user is actively engaged with Copilot while working in that repository."

Source: https://www.theregister.com/2026/03/26/github_ai_training_policy_changes/

fonix232@fedia.io · 12 pts · 158d (2 replies)

Yay, it's not enough that most companies store highly confidential code on GitHub, now we will let a PUBLIC agent be trained on them.

Wonder how long it will take for people to find ways around guardrails and have the model essentially copy the entire codebase of a specific company with a simple prompt.

8uurg@lemmy.world · 4 pts · 158d (1 reply)

Do note that GitHub explicitly excludes those with an Enterprise (or other corporate) plan for precisely those reasons.

artwork@lemmy.world · 2 pts · 158d

They do so now, but here's an update. What's the chance for a few years to reach another one?:
- "To keep up with global changes, we enabled Copilot for everyone, but there's still an option to opt-out! Plan Pro and up offers such an option just you decide on it! Meanwhile, we hope Copilot will help everyone for free, and with whole 10 tokens we gift you right now!"

who@feddit.org · 26 pts · 158d (7 replies)

To opt out, GitHub users should visit /settings/copilot/features and disable "Allow GitHub to use my data for AI model training" under the Privacy heading.

RichardDegenne@lemmy.zip · 18 pts · 158d (6 replies)

Do you guys really believe these opt-out buttons do anything?

Not /s btw, genuine question.

kilgore_trout@feddit.it · 8 pts · 158d

Maybe. But I wonder how would it apply: are my contributions to another user's repository still used for training if that user didn't opt out?

arty@feddit.org · 4 pts · 158d (2 replies)

To mirror your question: do you really believe that a significant fraction of users will uncheck this checkbox?

Personally, I think only a few percent will do this and Microsoft does not care about losing their data.

RichardDegenne@lemmy.zip · 6 pts · 158d (1 reply)

But why would they honor it in the first place? You have absolutely no way to check what they do with your data.

So we're just supposed to take their word for it?

arty@feddit.org · -1 pts · 158d

Would you also say that we have absolutely no way to confirm that Facebook managers know how addictive their apps are for children? I’m pretty sure that just a few years ago cynical people would say that. But only a couple of days ago this was proved in the court and Facebook lost the case.

So yeah, I believe that taking the company’s word for it is generally a winning strategy, and that blatant violations are relatively rare. Here, MS has a lot to lose and not much to win.

TacoSocks@infosec.pub · 1 pts · 158d

Placbo buttons to boil the frog.

poop@lemmy.zip · 1 pts · 158d

[ removed ]

mrnobody@reddthat.com · 26 pts · 158d

Color me shocked! Jk everybody saw that coming... It was probably hinted at to get reactions, then went ahead when people didn't bitch too much.

brown567@sh.itjust.works · 9 pts · 158d

I'd say I should pull my code from it, but I'm bad enough at coding that I think I'll leave it to poison the well

umbrella@lemmy.ml · 8 pts · 158d

[ removed ]

onlinepersona@programming.dev · 3 pts · 158d (2 replies)

People still won't leave 🤷