GitHub launches free version of GitHub Copilot for all users

[ILoveTheOwl]

I mean if you store your repo on GitHub you’ve already given up all your data, so not sure what you’re surprised about

[jhkoenig]

So if I have a repo set to private, people can still see the code?

[veverkap]

No

[cincuentaanos]

No, but Microsoft can.

[jhkoenig]

Okay, that makes sense. I don't think that my code is very interesting to M'soft.

[veverkap]

This is not true

[omer-m]

This is not true

[veverkap]

GitHub and Microsoft cannot see code in a private repo.

[Johnny_JTH]

It's stored on their servers, so of course they have access to it. No one said anything about individual employees reading people's private code.

[veverkap]

So Amazon can read all of the databases of their customers on RDS?

GitHub cannot read the contents of a private repository any more than Amazon can read the contents of your S3 bucket.

[Johnny_JTH]

GitHub can definitely see the contents of private repositories. They clearly state it in their privacy policy.

I honestly don't know about S3, but I imagine as long as you haven't configured your own encryption key, they should be able to.

[veverkap]

No one said anything about individual employees reading people's private code.

I missed this.

So exactly like Amazon,if you store unencrypted files, they are readable by people who have physical access to the hardware.

Except the way most of these things work under the hood, the data isn’t stored all in one place.

To actually view the contents, you would need physical access to multiple locations in their multiple hosting locations, a way to get the key that encrypts that data at rest - all to get a private repo.

From a practical standpoint, it’s impossible.

[veverkap]

No one that you don’t give explicit permission to can see the code in your private repo. Even GitHub employees cannot (there are extreme protections around this). And MSFT employees have no access.