Privacy Issues With Github Copilot😲😲😲😲

Key Takeaways

[Music] hello all my name is krishnak and welcome to my youtube channel so guys recently i've uploaded many videos on github co-pilot and how we also saw that how this particular extension is giving us some amazing suggestion related to code and all let it be with respect to data structures python eda machine learning pipelines many things as such but today a recent post that has come and this is related to the privacy concerns with respect to github co-pilot because today today only if you go and see this particular website here it has shown that github co-pilot ai is generating and giving out functional api keys okay and this is really a privacy issue okay and this issue was also acknowledged by the github ceo and the team is working on solving the issue so let's understand what this issue was really about you know and everybody just for starters if you don't know what github co-pilot is it is an assistant that can help you with better code suggestion but it has recently brought to notice that ai is leaking api keys that are valid and still functional now why this may be a problem because with this help of api's keys you know you will be able to access the company databases companies apis different different functionalities and all so over here you can see that it was first reported by a send grid engineer he asked the api ai for the keys and it showed them and if you're wondering the big deal here the api keys are critical as they provide access to all your apps databases now this is such a serious concern but again uh the github ceo has seen this particular thing and he has basically told that the company is working on this particular issue itself okay and uh here you can see a screenshot that you know the ai is emitting secrets over here and one more post was related to this particular twitter link you know uh over here you'll be able to see that if i just reload this page you will be able to see that there was one code which is called as inverse square root okay and remember this is a license i think this is a licensed code itself you know because if you go and create any repositories in github there you have an option to select the type of license right but considering that here you could see that coa copyright 2015 rate distribution and use in source and binary forms with or without modification you can see all the information regarding this particular code and this code was completely in a licensed version only but again the developer got this entire code itself apart from that you could also see lot of comments from where people are saying that here we have direct evidence of github directly reproducing a gpld chunk of code so this is a code of a specific company which is in the licensed version providing that this is a really dangerous tools to use in commercial environments uh but let's see how the things will go ahead but uh definitely one thing is that with great power comes great responsibilities and sometime with respect to ai also we can think that there will be some issues that may be coming up and probably as we go ahead these things will be getting fixed or probably be coming up but this is really a serious concern now if i just go to my github and probably just open this in the form of the repositories and suppose if i'm creating a new repository over here right suppose i'm creating a new repository it will tell me to choose a license over here and over here if i say it is a general public license general public license if i select then probably it should allow us to use the code reuse the code or modify the code for our working purpose other than that if you use this other kind of license which is very much important with respect to a company where i think the usage restriction will be there and even though you have that specific license and probably github co-pilot is referring you that particular thing then i think that is a serious uh issue related to copyright infringement so definitely this was the thing but again over here you can see that the github ceo has acknowledged this and they are probably fixing this particular issue and probably this kind of issues may come up because again this can be really handy tool with respect to implementing or doing the developer jobs as quick as possible so i really wanted to just make a video on to make you understand about this because everybody's talking now about github co-pilot and how amazing it can be for a developer right it'll help you to do the work but yes this was it uh from my side from from my video and uh again i'll give you this url you can have a look and uh let me know about your thoughts and comments in the comment section of this particular video so this is it from my side guys i'll see y'all in the next video have a great day thank you and all bye