I must be too tired because I cannot figure out what happened in that pull request. The PR/source branch was over a year old with none of the commits adding up to the full diff. There is [1], which introduced the vulnerability but didn't remove the environment variables above, then master is merged into it via [2] (but still doesn't show the variables being removed), yet in the full PR diff they're gone.
In any case, I'm pretty sure you misattributed the vulnerability to Copilot because the PR got squash-merged and _all_ of the changes were then attributed to every contributor in that PR, despite Copilot only appearing on one of the commits.
The first linked PR (#1218) has only one commit co-authored by Copilot and it's not related to the vulnerability, and neither are the other suggestions in the PR. Am I missing something?
What happened to "I don't know" or "I'm not sure"? Why do you need to direct someone to ask an LLM? If somebody asks me a question I don't know the answer to I'm not sending them anywhere, I tell them I don't know.
My first thought was that they have several people who seem like they'll expect very serious compensation but no actual product, then I noticed they already seem to have a whole bunch of VC backers. I'm not gonna lie, I'm a little jealous of people who can make a flashy vaporware pitch deck and ride the VC gravy train.
I have yet to see someone explain why they even needed an LLM to figure out what's going on, other than further proliferating this industry AI psychosis. Are their engineers actually so incompetent that they can't read a bunch of logs without AI? Here I was thinking these fancy AI companies are only hiring the best and the brightest, but apparently 7 rounds of leetcode does a number on your hiring process.
You literally need two or three mouse buttons for a FPS game. This argument might have worked if you said MMO because there’s a million abilities you can use but there’s absolutely nothing special about Razer mice when it comes to FPS specifically.
The link talks about more than just SQL injection. SQL injection can be fully mitigated using prepared statements. They were the solution 15 years ago when I was getting started with PHP in high school and it's still applicable today. The fact that SQL injection remains an issue speaks volumes about the general quality of software engineers.
The GitHub statistics for the project this website represents are insane. It has a sole author that has averaged approximately 20,000 lines of code every week in the past month. How do you even maintain that alone?
I’ve never gone through a paid training course that wasn’t a complete waste of time. It’s at the point where people at work know there isn’t even a point in offering these to me. “But why don’t you take the Terraform training?” Because I’m not going to waste my time with a 3-day course where it takes the first day to install and configure Terraform. I can install it on my computer in 5 minutes. I think people usually see these as a paid vacation, but I find them so insufferably boring I’d rather just work.
I'm going to be honest with you, I never even considered that the pinnacle of enterprise software would have a public issue tracker (do they?). If something doesn't work the way I expect I just accept it and move on.
GitLab could be the perfect case study on AI-powered efficiency improvements. I have never interacted with a piece of software that, for every single problem I found, there was an open issue always at least 4-7 years old that was just being shuffled around by managers adding and removing random labels.
Surely with all of these ridiculous developer productivity gains enabled by AI, they should finally be able to fix all of these ancient issues quickly and clean up the backlog.
Nope, “workforce reduction” thanks to AI again. This charade is getting boring.
My colleague had a problem with commit messages, so now they're all written by AI. I don't know what depth of hell he managed to get the prompt from, but they're all now in the format "Updated /path/to/file: fixed issue in thingamabob", which means they're all at least 200 characters long and half of it is the file path, an absolutely pointless thing to put in a commit message. The best part is that whenever you look at GitLab or GitHub, instead of seeing the commit message next to the file you just see the file name again, then the message is cut off.
There is simply no chance that LLMs are saving you 30 hours of work a week, especially if they're doing something where you'd have to do the research yourself. Either you're just simply wrong, or you went from understanding the code you were writing to skimming whatever the magic box spits out and either merging it outright or pawning off the effort of review on someone else.
Are you ashamed of other people finding out you used Claude? I think the co-authored-by bit should not be a setting at all, AI-generated code should be clearly identified.
I'm sorry but none of this sounds in any way exciting or like a breakthrough. There are ASML machines that hit microscopic tin particles with a laser 50,000 times per second, but it's somehow an achievement we've managed to create a ping pong paddle that's fast enough to hit a ball? Precision robotics have been used in manufacturing for decades.
Is this a joke? You proclaim your support for a party that proudly posts AI-generated pictures of Obama as a monkey, shits out vitriol-filled messages on literally every holiday, and sends the gestapo to execute American citizens in the streets, and then you demand civil discourse? I'm sorry but that ship has sailed, there is no reason why someone should maintain a civil discussion with you.
A bunch of AquaSec stuff has been getting compromised since the initial incident at end of February. Apparently in the latest attack they managed to compromise their internal organisation: https://opensourcemalware.com/blog/teampcp-aquasec-com-githu...
The comment perfectly exemplifies the kind of person that would work at OpenAI. Government AI drones could be executing citizens in the streets but they’d still find some sort of cope why it’s not a problem. They’ll keep moving the goalposts as long as the money keeps coming.
Right, that's why they have massive churches adorned with gold and intricate sculptures. Just because it technically isn't required to pay does not mean that years of brainwashing won't condition you to give your money away. I've only been a few times, but seeing old people queue up to give a sizable part of their pension to the church just made me sad.
This is such a hilarious out of touch SV techbro comment I can't believe it's real. You're a monkey with a computer that knows how to Google, there's an endless amount of people who can replace you.
This is mostly an issue with German cars. A lower-end Skoda comes standard with features that would cost half the car's price if optioned on a Mercedes.
It's funny because he tried to excuse it in another comment by saying he's using speech-to-text. I really don't understand what this lie was supposed to accomplish since he seems to be the only person using a STT system incapable of proper capitalisation.