bodo22

Risk Assessment of GitHub Copilot

0xabad1dea, July 2021

this is a rough draft and may be updated with more examples

GitHub was kind enough to grant me swift access to the Copilot test phase despite me @'ing them several hundred times about ICE. I would like to examine it not in terms of productivity, but security. How risky is it to allow an AI to write some or all of your code?

Ultimately, a human being must take responsibility for every line of code that is committed. AI should not be used for "responsibility washing." However, Copilot is a tool, and workers need their tools to be reliable. A carpenter doesn't have to

	{
	"@context": "https://seige.digital/ns/iiif.jsonld",
	"id": "https://strollid.manducus.net/bodo22/6bcacfc4b261b78b8284170f68f28a1b",
	"type": "AnnotationPageSequence",
	"pages": [],
	"metadata": {
	"author": "",
	"title": "New Stroll",
	"license": ""
	}


	// Available variables:
	// - Machine
	// - interpret
	// - assign
	// - send
	// - sendParent
	// - spawn
	// - raise
	// - actions

	# source $HOME/.bashrc
	zstyle ':omz:update' mode reminder
	# If you come from bash you might have to change your $PATH.
	export PATH=$HOME/bin:/usr/local/bin:$PATH

	# Path to your oh-my-zsh installation.
	export ZSH="$HOME/.oh-my-zsh"
	export NVM_AUTO_USE=true

	# Set name of the theme to load --- if set to "random", it will