A place to cache linked articles (think custom and personal wayback machine)
Du kan inte välja fler än 25 ämnen Ämnen måste starta med en bokstav eller siffra, kan innehålla bindestreck ('-') och vara max 35 tecken långa.

index.html 12KB

3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
3 år sedan
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182
  1. <!doctype html><!-- This is a valid HTML5 document. -->
  2. <!-- Screen readers, SEO, extensions and so on. -->
  3. <html lang="fr">
  4. <!-- Has to be within the first 1024 bytes, hence before the `title` element
  5. See: https://www.w3.org/TR/2012/CR-html5-20121217/document-metadata.html#charset -->
  6. <meta charset="utf-8">
  7. <!-- Why no `X-UA-Compatible` meta: https://stackoverflow.com/a/6771584 -->
  8. <!-- The viewport meta is quite crowded and we are responsible for that.
  9. See: https://codepen.io/tigt/post/meta-viewport-for-2015 -->
  10. <meta name="viewport" content="width=device-width,initial-scale=1">
  11. <!-- Required to make a valid HTML5 document. -->
  12. <title>GitHub's Copilot Is Generating Functional API Keys (archive) — David Larlet</title>
  13. <meta name="description" content="Publication mise en cache pour en conserver une trace.">
  14. <!-- That good ol' feed, subscribe :). -->
  15. <link rel="alternate" type="application/atom+xml" title="Feed" href="/david/log/">
  16. <!-- Generated from https://realfavicongenerator.net/ such a mess. -->
  17. <link rel="apple-touch-icon" sizes="180x180" href="/static/david/icons2/apple-touch-icon.png">
  18. <link rel="icon" type="image/png" sizes="32x32" href="/static/david/icons2/favicon-32x32.png">
  19. <link rel="icon" type="image/png" sizes="16x16" href="/static/david/icons2/favicon-16x16.png">
  20. <link rel="manifest" href="/static/david/icons2/site.webmanifest">
  21. <link rel="mask-icon" href="/static/david/icons2/safari-pinned-tab.svg" color="#07486c">
  22. <link rel="shortcut icon" href="/static/david/icons2/favicon.ico">
  23. <meta name="msapplication-TileColor" content="#f7f7f7">
  24. <meta name="msapplication-config" content="/static/david/icons2/browserconfig.xml">
  25. <meta name="theme-color" content="#f7f7f7" media="(prefers-color-scheme: light)">
  26. <meta name="theme-color" content="#272727" media="(prefers-color-scheme: dark)">
  27. <!-- Documented, feel free to shoot an email. -->
  28. <link rel="stylesheet" href="/static/david/css/style_2021-01-20.css">
  29. <!-- See https://www.zachleat.com/web/comprehensive-webfonts/ for the trade-off. -->
  30. <link rel="preload" href="/static/david/css/fonts/triplicate_t4_poly_regular.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)" crossorigin>
  31. <link rel="preload" href="/static/david/css/fonts/triplicate_t4_poly_bold.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)" crossorigin>
  32. <link rel="preload" href="/static/david/css/fonts/triplicate_t4_poly_italic.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)" crossorigin>
  33. <link rel="preload" href="/static/david/css/fonts/triplicate_t3_regular.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: dark)" crossorigin>
  34. <link rel="preload" href="/static/david/css/fonts/triplicate_t3_bold.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: dark)" crossorigin>
  35. <link rel="preload" href="/static/david/css/fonts/triplicate_t3_italic.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: dark)" crossorigin>
  36. <script>
  37. function toggleTheme(themeName) {
  38. document.documentElement.classList.toggle(
  39. 'forced-dark',
  40. themeName === 'dark'
  41. )
  42. document.documentElement.classList.toggle(
  43. 'forced-light',
  44. themeName === 'light'
  45. )
  46. }
  47. const selectedTheme = localStorage.getItem('theme')
  48. if (selectedTheme !== 'undefined') {
  49. toggleTheme(selectedTheme)
  50. }
  51. </script>
  52. <meta name="robots" content="noindex, nofollow">
  53. <meta content="origin-when-cross-origin" name="referrer">
  54. <!-- Canonical URL for SEO purposes -->
  55. <link rel="canonical" href="https://fossbytes.com/github-copilot-generating-functional-api-keys/">
  56. <body class="remarkdown h1-underline h2-underline h3-underline em-underscore hr-center ul-star pre-tick" data-instant-intensity="viewport-all">
  57. <article>
  58. <header>
  59. <h1>GitHub's Copilot Is Generating Functional API Keys</h1>
  60. </header>
  61. <nav>
  62. <p class="center">
  63. <a href="/david/" title="Aller à l’accueil"><svg class="icon icon-home">
  64. <use xlink:href="/static/david/icons2/symbol-defs-2021-12.svg#icon-home"></use>
  65. </svg> Accueil</a> •
  66. <a href="https://fossbytes.com/github-copilot-generating-functional-api-keys/" title="Lien vers le contenu original">Source originale</a>
  67. </p>
  68. </nav>
  69. <hr>
  70. <p>Microsoft, in partnership with OpenAI, made Copilot available on <a href="https://fossbytes.com/tag/github" target="_blank" aria-label=" (opens in a new tab)" rel="noreferrer noopener" class="ek-link">GitHub</a>. For starters, it&#8217;s an assistant that can help you with better code suggestions, but it has been recently brought to notice that the AI is leaking API keys that are valid and still functional.</p>
  71. <p>First reported by a SendGrid engineer, he asked the AI for the keys, and it showed them. If you&#8217;re wondering the big deal here, API keys are critical as they provide access to all your app&#8217;s databases.</p>
  72. <p>Developer <a href="https://github.com/dtjm" target="_blank" aria-label="dtjm (opens in a new tab)" rel="noreferrer noopener" class="ek-link">dtjm</a> opened a request in Report Bugs where he posted an image of him requesting the secrets and getting back API keys.</p>
  73. <figure class="wp-block-image size-large"><img width="1024" height="630" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201024%20630'%3E%3C/svg%3E" alt="AI is emitting secrets - github copilot" class="wp-image-217388" data-lazy-srcset="https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-1024x630.jpeg 1024w, https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-300x185.jpeg 300w, https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-768x473.jpeg 768w, https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-1536x946.jpeg 1536w, https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets.jpeg 1876w" data-lazy-sizes="(max-width: 1024px) 100vw, 1024px" data-lazy-src="https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-1024x630.jpeg" /><noscript><img width="1024" height="630" src="https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-1024x630.jpeg" alt="AI is emitting secrets - github copilot" class="wp-image-217388" srcset="https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-1024x630.jpeg 1024w, https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-300x185.jpeg 300w, https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-768x473.jpeg 768w, https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets-1536x946.jpeg 1536w, https://fossbytes.com/wp-content/uploads/2021/07/AI-is-emitting-secrets.jpeg 1876w" sizes="(max-width: 1024px) 100vw, 1024px" /></noscript></figure>
  74. <p>GitHub CEO has acknowledged the issue, and the GitHub team is working on the issue. </p>
  75. <p>Earlier this week, a lot of established open-source developers are moving away from GitHub. One of the developers said, &#8220;I disagree with GitHub&#8217;s unauthorized and unlicensed use of copyrighted source code as training data for their ML-powered GitHub Copilot AI. This product injects source code derived from copyrighted sources into their customers&#8217; software without informing thereof the license of the source code. This significantly eases unauthorized and unlicensed use of copyright holder&#8217;s work.&#8221;</p>
  76. <p>If Microsoft is really doing this is still unknown, certain instances definitely prove the above statement. Here&#8217;s one of them.</p>
  77. <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
  78. <blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">reproducing carmack&#39;s famous inverse square root function from Quake 3 <a href="https://t.co/l9xB2gflhc">https://t.co/l9xB2gflhc</a></p>&mdash; nixCraft (@nixcraft) <a href="https://twitter.com/nixcraft/status/1411440811095564290?ref_src=twsrc%5Etfw">July 3, 2021</a></blockquote><script data-minify="1" async src="https://fossbytes.com/wp-content/cache/min/1/widgets.js?ver=1625862119" charset="utf-8"></script>
  79. </div></figure>
  80. <p>What do you think of the GitHub Copilot AI? Do you think Microsoft is making the AI suggest code from copyrighted sources? Let us know your thoughts and opinions in the comments section below.</p>
  81. </article>
  82. <hr>
  83. <footer>
  84. <p>
  85. <a href="/david/" title="Aller à l’accueil"><svg class="icon icon-home">
  86. <use xlink:href="/static/david/icons2/symbol-defs-2021-12.svg#icon-home"></use>
  87. </svg> Accueil</a> •
  88. <a href="/david/log/" title="Accès au flux RSS"><svg class="icon icon-rss2">
  89. <use xlink:href="/static/david/icons2/symbol-defs-2021-12.svg#icon-rss2"></use>
  90. </svg> Suivre</a> •
  91. <a href="http://larlet.com" title="Go to my English profile" data-instant><svg class="icon icon-user-tie">
  92. <use xlink:href="/static/david/icons2/symbol-defs-2021-12.svg#icon-user-tie"></use>
  93. </svg> Pro</a> •
  94. <a href="mailto:david%40larlet.fr" title="Envoyer un courriel"><svg class="icon icon-mail">
  95. <use xlink:href="/static/david/icons2/symbol-defs-2021-12.svg#icon-mail"></use>
  96. </svg> Email</a> •
  97. <abbr class="nowrap" title="Hébergeur : Alwaysdata, 62 rue Tiquetonne 75002 Paris, +33184162340"><svg class="icon icon-hammer2">
  98. <use xlink:href="/static/david/icons2/symbol-defs-2021-12.svg#icon-hammer2"></use>
  99. </svg> Légal</abbr>
  100. </p>
  101. <template id="theme-selector">
  102. <form>
  103. <fieldset>
  104. <legend><svg class="icon icon-brightness-contrast">
  105. <use xlink:href="/static/david/icons2/symbol-defs-2021-12.svg#icon-brightness-contrast"></use>
  106. </svg> Thème</legend>
  107. <label>
  108. <input type="radio" value="auto" name="chosen-color-scheme" checked> Auto
  109. </label>
  110. <label>
  111. <input type="radio" value="dark" name="chosen-color-scheme"> Foncé
  112. </label>
  113. <label>
  114. <input type="radio" value="light" name="chosen-color-scheme"> Clair
  115. </label>
  116. </fieldset>
  117. </form>
  118. </template>
  119. </footer>
  120. <script src="/static/david/js/instantpage-5.1.0.min.js" type="module"></script>
  121. <script>
  122. function loadThemeForm(templateName) {
  123. const themeSelectorTemplate = document.querySelector(templateName)
  124. const form = themeSelectorTemplate.content.firstElementChild
  125. themeSelectorTemplate.replaceWith(form)
  126. form.addEventListener('change', (e) => {
  127. const chosenColorScheme = e.target.value
  128. localStorage.setItem('theme', chosenColorScheme)
  129. toggleTheme(chosenColorScheme)
  130. })
  131. const selectedTheme = localStorage.getItem('theme')
  132. if (selectedTheme && selectedTheme !== 'undefined') {
  133. form.querySelector(`[value="${selectedTheme}"]`).checked = true
  134. }
  135. }
  136. const prefersColorSchemeDark = '(prefers-color-scheme: dark)'
  137. window.addEventListener('load', () => {
  138. let hasDarkRules = false
  139. for (const styleSheet of Array.from(document.styleSheets)) {
  140. let mediaRules = []
  141. for (const cssRule of styleSheet.cssRules) {
  142. if (cssRule.type !== CSSRule.MEDIA_RULE) {
  143. continue
  144. }
  145. // WARNING: Safari does not have/supports `conditionText`.
  146. if (cssRule.conditionText) {
  147. if (cssRule.conditionText !== prefersColorSchemeDark) {
  148. continue
  149. }
  150. } else {
  151. if (cssRule.cssText.startsWith(prefersColorSchemeDark)) {
  152. continue
  153. }
  154. }
  155. mediaRules = mediaRules.concat(Array.from(cssRule.cssRules))
  156. }
  157. // WARNING: do not try to insert a Rule to a styleSheet you are
  158. // currently iterating on, otherwise the browser will be stuck
  159. // in a infinite loop…
  160. for (const mediaRule of mediaRules) {
  161. styleSheet.insertRule(mediaRule.cssText)
  162. hasDarkRules = true
  163. }
  164. }
  165. if (hasDarkRules) {
  166. loadThemeForm('#theme-selector')
  167. }
  168. })
  169. </script>
  170. </body>
  171. </html>