al2d ago
GitHub quietly changed its privacy policy. From 24 April, all Copilot Free, Pro and Pro+ interaction data -- prompts, code snippets, file names, repo structure -- feeds Microsoft's AI training pipeline. By default.
Opt out: github.com/settings/copilot/features → Privacy → Disable.
No feature penalty. No good reason not to.
Full piece:
sovereignauditor.substack.com/p/your-code-is-their-training-data… (1/2)
Show threadal2d ago
Business and Enterprise users are exempt. Their contracts prohibit it. Individual developers hand over more data and pay less. That's not an accident.
GitHub is Microsoft. Microsoft is CLOUD Act and FISA 702. The platform changes. The structural problem doesn't.
If you're coding client work through Copilot, check your client agreements before the 24th.
#infosec #privacy #datasovereignty #github #GDPR (2/2)
Show threadBruce Simpson, Ph.D.2d ago
@alan I have largely shitcanned GitHub premptively for any serious use since rejoining the computing world proper in December, and since regaining GitHub account access in late January. The counterparty, IP, INFOSEC, and OPSEC risks are just too great now.
Show threadal2d ago
@bms48 Are you running your own git now?
Show threadBruce Simpson, Ph.D.
@alan I use and contribute towards #SourceHut because I trust @sircmpwn to do the right thing by us.
Apr 11 at 2:13pmWeb