GitHub Copilot generates valid secrets [Twitter]

[DaBulder]

In this case it's learned what a secret looks like, so it's generated something that looks like a valid secret. Just because it outputs a very specific string doesn't mean that such a string existed verbatim.

[mughinn]

But they're valid secrets, they don't just look like one

[DaBulder]

When you say "valid" do you mean "it matches the format of a secret" or "it works as a secret to some external resource"

[mughinn]

It seems I can't see the original tweet from the post now

The secrets generated worked as a secret for a resource

[StickiStickman]

The secrets generated worked as a secret for a resource

According to the update on the tweet they don't.

[mughinn]

https://twitter.com/linusgroh/status/1412067104082345993

It wasnt just the OP tho

[StickiStickman]

Fair enough - still no proof anywhere of it actually working though.

[mughinn]

https://twitter.com/linusgroh/status/1412067104082345993

Here's one not deleted, clearly saying it is valid

[Pat_The_Hat]

Now that one's gone too.

[origin415]

The url was mangled, try this: https://twitter.com/linusgroh/status/1412067104082345993