I've been talking to GitHub and giving them feedback on their "create issues with Copilot" thing they have in the works.
Today I tested a version for them and using it I asked copilot to find and report a security problem in curl and make it sound terrifying.
In about ten seconds it had a 100-line description of a "catastrophic vulnerability" it was happy to create an issue for. Entirely made up of course, but sounded plausible.
Proved my point excellently.
m_eiman
in reply to daniel:// stenberg:// • • •Tobias
in reply to daniel:// stenberg:// • • •Christoph Heiss
in reply to daniel:// stenberg:// • • •They _really_ pressure you into using this worthless stuff. GitHub is on a steep and irreversible downhill slope, that's for sure.
Remove Copilot reviews from this org
Ma27 (GitHub)Toni Aittoniemi
in reply to daniel:// stenberg:// • • •Negative12DollarBill
in reply to daniel:// stenberg:// • • •Purple
in reply to daniel:// stenberg:// • • •Even when attempted to use seriously, having AI write an issue removes one of the most important pieces of detail: The writing style and word choice of the person writing the issue.
You can gather /so/ much from words used and how issues are described. I feel like whoever thought AI could just write things never has understood the concept of reading between the lines.
Fat_Farang
in reply to daniel:// stenberg:// • • •Luka Rubinjoni
in reply to daniel:// stenberg:// • • •Didek
in reply to daniel:// stenberg:// • • •Wulfy
in reply to daniel:// stenberg:// • • •Sounds exactly like when I was creating security reports for my network for the executives.
If you make it sound benign, no action will be taken.
😁
#Infosecethics
Wulfy
in reply to daniel:// stenberg:// • • •Sounds exactly like when I was creating security reports for my network for the executives.
If you make it sound benign, no action will be taken.
😁
Now, to take your newly discovered AI expertise. Run your alarmistic AI generated repot back through AI to assess its validity.
#AICentipede.
#Infosecethics
kolya
in reply to daniel:// stenberg:// • • •lzccr
in reply to daniel:// stenberg:// • • •Rome0
in reply to daniel:// stenberg:// • • •Tyler Parker
in reply to daniel:// stenberg:// • • •would be way more into #copilot if #microsoft didn't work for #ice.
thus, been exploring #foss alternatives:
#roocode #ollama #continue #vscodium
NosirrahSec 🏴☠️ guillotine enthusiast
in reply to daniel:// stenberg:// • • •They don't care, though.
Microsoft, and by association Github, are tied intrinsically with AI slop and they do not care about intellectual property rights, quality of their product, privacy rights, developers unless they're AI focused, or anyone else.
They are going to steamroll right over any complaint and just keep wasting monstrous amounts of resources, clean water, electricity, and damaging the environment all so that they can keep fisting "AI" into things no one wants.
Gina Häußge
in reply to daniel:// stenberg:// • • •Between that and it not even remotely attempting to do anything helpful with my issue form I think we both proved our point quite nicely 😄
I just fear it won't change much 😕
Stephanie
in reply to daniel:// stenberg:// • • •Jimmy Sjölund
in reply to daniel:// stenberg:// • • •Expertenkommision Cyberunfall
in reply to daniel:// stenberg:// • • •Nikhil 🐧
in reply to daniel:// stenberg:// • • •1a1nC
in reply to daniel:// stenberg:// • • •Knut Branson
in reply to daniel:// stenberg:// • • •Harm
in reply to daniel:// stenberg:// • • •Stuart Marks
in reply to daniel:// stenberg:// • • •Daniel Rotter
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Daniel Rotter • • •@danrot => mastodon.social/@bagder/114782…
daniel:// stenberg://
2025-07-02 06:25:02
Daniel Rotter
in reply to daniel:// stenberg:// • • •