Is copilot a huge security vulnerability?
https://www.reddit.com/r/programming/comments/1gijbgw/is_copilot_a_huge_security_vulnerability/
<!-- SC_OFF -->It is my understanding that copilot sends all files from your codebase to the cloud in order to process them… I checked docs and with copilot chat itself and there is no way to have a configuration file, local or global, to instruct copilot to not read files, like a .gitignore So, in the case that you retain untracked files like a .env that populates environment variables, when opening it, copilot will send this file to the cloud exposing your development credentials. The same issue can arise if you accidentally open “ad-hoc” a file to edit it with vsc, like say your ssh config… Copilot offers exclusions via a configuration on the repository on github https://docs.github.com/en/copilot/managing-copilot/managing-github-copilot-in-your-organization/setting-policies-for-copilot-in-your-organization/excluding-content-from-github-copilot That’s quite unwieldy and practically useless when it comes to opening ad-hoc, out of project files for editing. Please don’t make this a debate about storing secrets on a project, it’s a beaten down topic and out of scope of this post. The real question is how could such an omission exist and such a huge security vulnerability introduced by Microsoft? I would expect some sort of “explicit opt-in” process for copilot to be allowed to roam on a file, folder or project… wouldn’t you? Or my understanding is fundamentally wrong? <!-- SC_ON --> submitted by /u/infinitelolipop (https://www.reddit.com/user/infinitelolipop)
[link] (https://docs.github.com/en/copilot/managing-copilot/managing-github-copilot-in-your-organization/setting-policies-for-copilot-in-your-organization/excluding-content-from-github-copilot) [comments] (https://www.reddit.com/r/programming/comments/1gijbgw/is_copilot_a_huge_security_vulnerability/)
The original author of the Fernflower Java decompiler, Stiver, has died
https://www.reddit.com/r/programming/comments/1gihakr/the_original_author_of_the_fernflower_java/
submitted by /u/TheBrokenRail-Dev (https://www.reddit.com/user/TheBrokenRail-Dev)
[link] (https://blog.jetbrains.com/idea/2024/11/in-memory-of-stiver/) [comments] (https://www.reddit.com/r/programming/comments/1gihakr/the_original_author_of_the_fernflower_java/)
Made a cool startup script that helps you quit smoking
https://www.reddit.com/r/programming/comments/1giawg4/made_a_cool_startup_script_that_helps_you_quit/
submitted by /u/OrganizationWinter99 (https://www.reddit.com/user/OrganizationWinter99)
[link] (https://github.com/0x0elliot/viceChecker) [comments] (https://www.reddit.com/r/programming/comments/1giawg4/made_a_cool_startup_script_that_helps_you_quit/)
C Until It Is No Longer C
https://www.reddit.com/r/programming/comments/1gi124a/c_until_it_is_no_longer_c/
submitted by /u/pmz (https://www.reddit.com/user/pmz)
[link] (https://aartaka.me/c-not-c) [comments] (https://www.reddit.com/r/programming/comments/1gi124a/c_until_it_is_no_longer_c/)
Need help choosing programming language (Jr dev)
https://www.reddit.com/r/programming/comments/1ghy9ok/need_help_choosing_programming_language_jr_dev/
<!-- SC_OFF -->Hey guys i am an experienced programmer- proficient in JS, TS, React and new to python. I just noticed that i don’t like any of those languages as they appose no challenge. I have come to the realization that all of these languages are overused and over-saturated . I like the C programming languages and would love to be challenged as a programer. I hate looking for “the best libraries “ and so on. Instead i want to code something that has something meaningful. I like the idea of desktop applications, games and so on These todo apps and websites dont move me at all.. <!-- SC_ON --> submitted by /u/Soft-Flow-7884 (https://www.reddit.com/user/Soft-Flow-7884)
[link] (https://www.sajjadalgburi.dev/) [comments] (https://www.reddit.com/r/programming/comments/1ghy9ok/need_help_choosing_programming_language_jr_dev/)
Superstreamer - OSS streaming toolkit from video source to player
https://www.reddit.com/r/programming/comments/1ghrvch/superstreamer_oss_streaming_toolkit_from_video/
submitted by /u/moremat_ (https://www.reddit.com/user/moremat_)
[link] (https://github.com/matvp91/superstreamer) [comments] (https://www.reddit.com/r/programming/comments/1ghrvch/superstreamer_oss_streaming_toolkit_from_video/)
Exponential rate limiting
https://www.reddit.com/r/programming/comments/1ghpb0h/exponential_rate_limiting/
submitted by /u/fagnerbrack (https://www.reddit.com/user/fagnerbrack)
[link] (https://dotat.at/@/2024-09-02-ewma.html) [comments] (https://www.reddit.com/r/programming/comments/1ghpb0h/exponential_rate_limiting/)
Open-sourced QueryFlip: Auto-switching between Google & ChatGPT based on query length
https://www.reddit.com/r/programming/comments/1ghmprh/opensourced_queryflip_autoswitching_between/
submitted by /u/atlasspring (https://www.reddit.com/user/atlasspring)
[link] (https://github.com/cbora/query-flip) [comments] (https://www.reddit.com/r/programming/comments/1ghmprh/opensourced_queryflip_autoswitching_between/)
Reverse Engineering Minified Code Using OpenAI
https://www.reddit.com/r/programming/comments/1ghigws/reverse_engineering_minified_code_using_openai/
submitted by /u/fagnerbrack (https://www.reddit.com/user/fagnerbrack)
[link] (https://glama.ai/blog/2024-08-29-reverse-engineering-minified-code-using-openai) [comments] (https://www.reddit.com/r/programming/comments/1ghigws/reverse_engineering_minified_code_using_openai/)
How to Build Smaller Container Images: Docker Multi-Stage Builds
https://www.reddit.com/r/programming/comments/1ghgewg/how_to_build_smaller_container_images_docker/
submitted by /u/iximiuz (https://www.reddit.com/user/iximiuz)
[link] (https://labs.iximiuz.com/tutorials/docker-multi-stage-builds) [comments] (https://www.reddit.com/r/programming/comments/1ghgewg/how_to_build_smaller_container_images_docker/)
Revisiting Reliability in Large-Scale Machine Learning Research Clusters
https://www.reddit.com/r/programming/comments/1ghffjy/revisiting_reliability_in_largescale_machine/
submitted by /u/mttd (https://www.reddit.com/user/mttd)
[link] (https://glennklockwood.com/garden/papers/revisiting-reliability-in-large-scale-machine-learning-research-clusters) [comments] (https://www.reddit.com/r/programming/comments/1ghffjy/revisiting_reliability_in_largescale_machine/)
Kafka with Spring Boot With Project Setup
https://www.reddit.com/r/programming/comments/1gheru2/kafka_with_spring_boot_with_project_setup/
submitted by /u/Latter-Dust8587 (https://www.reddit.com/user/Latter-Dust8587)
[link] (https://makemychance.com/kafka-with-spring-boot-with-project-setup/) [comments] (https://www.reddit.com/r/programming/comments/1gheru2/kafka_with_spring_boot_with_project_setup/)
Notepad++ is 21 years old
https://www.reddit.com/r/programming/comments/1gh7vgg/notepad_is_21_years_old/
submitted by /u/pinkpen_net (https://www.reddit.com/user/pinkpen_net)
[link] (https://sht.ac/2kzVlI) [comments] (https://www.reddit.com/r/programming/comments/1gh7vgg/notepad_is_21_years_old/)
Andrew Favia | Python has a hidden small text editor available. With Emacs Keybindings.
https://www.reddit.com/r/programming/comments/1gh7la9/andrew_favia_python_has_a_hidden_small_text/
submitted by /u/agumonkey (https://www.reddit.com/user/agumonkey)
[link] (https://andrewfavia.dev/posts/text-editor-in-python/) [comments] (https://www.reddit.com/r/programming/comments/1gh7la9/andrew_favia_python_has_a_hidden_small_text/)
Why those particular integer multiplies?
https://www.reddit.com/r/programming/comments/1gh2svu/why_those_particular_integer_multiplies/
submitted by /u/mariuz (https://www.reddit.com/user/mariuz)
[link] (https://fgiesen.wordpress.com/2024/10/26/why-those-particular-integer-multiplies/) [comments] (https://www.reddit.com/r/programming/comments/1gh2svu/why_those_particular_integer_multiplies/)
CSS Anchor Positioning API
https://www.reddit.com/r/programming/comments/1gihgyc/css_anchor_positioning_api/
submitted by /u/Latter-Dust8587 (https://www.reddit.com/user/Latter-Dust8587)
[link] (https://makemychance.com/css-anchor-positioning-api/) [comments] (https://www.reddit.com/r/programming/comments/1gihgyc/css_anchor_positioning_api/)
Thoughts on Software Complexity
https://www.reddit.com/r/programming/comments/1gidjkd/thoughts_on_software_complexity/
submitted by /u/TurnPale7340 (https://www.reddit.com/user/TurnPale7340)
[link] (HobokenDays/thoughts-on-software-complexity-23958ef7086c" rel="nofollow">https://medium.com/@HobokenDays/thoughts-on-software-complexity-23958ef7086c) [comments] (https://www.reddit.com/r/programming/comments/1gidjkd/thoughts_on_software_complexity/)
Build a Secure Transaction System with Django Rest Framework (DRF) - Step-by-Step Guide
https://www.reddit.com/r/programming/comments/1gi824f/build_a_secure_transaction_system_with_django/
submitted by /u/Ok-Look3220 (https://www.reddit.com/user/Ok-Look3220)
[link] (https://youtu.be/81k2pj436wA) [comments] (https://www.reddit.com/r/programming/comments/1gi824f/build_a_secure_transaction_system_with_django/)
Introducing the New BIP38 Desktop Application: Secure Your Private Keys Across 150+ Cryptocurrencies
https://www.reddit.com/r/programming/comments/1gi0zc7/introducing_the_new_bip38_desktop_application/
submitted by /u/meherett (https://www.reddit.com/user/meherett)
[link] (http://github.com/meherett/python-bip38) [comments] (https://www.reddit.com/r/programming/comments/1gi0zc7/introducing_the_new_bip38_desktop_application/)
Simple Tips for Bug Bounty Beginners: Escalating Open-Redirect to XSS
https://www.reddit.com/r/programming/comments/1ghs7is/simple_tips_for_bug_bounty_beginners_escalating/
submitted by /u/Ok_Set_6991 (https://www.reddit.com/user/Ok_Set_6991)
[link] (anishnarayan/simple-tips-for-bug-bounty-beginners-escalating-to-xss-xss-series-part-2-1d6b75ecf942" rel="nofollow">https://medium.com/@anishnarayan/simple-tips-for-bug-bounty-beginners-escalating-to-xss-xss-series-part-2-1d6b75ecf942) [comments] (https://www.reddit.com/r/programming/comments/1ghs7is/simple_tips_for_bug_bounty_beginners_escalating/)
Weird Lexical Syntax
https://www.reddit.com/r/programming/comments/1ghrr5h/weird_lexical_syntax/
submitted by /u/jart (https://www.reddit.com/user/jart)
[link] (https://justine.lol/lex/) [comments] (https://www.reddit.com/r/programming/comments/1ghrr5h/weird_lexical_syntax/)
Simple sdl3 raycaster
https://www.reddit.com/r/programming/comments/1ghmr77/simple_sdl3_raycaster/
submitted by /u/snubcrescent (https://www.reddit.com/user/snubcrescent)
[link] (https://github.com/nfriel/raycast_sdl3) [comments] (https://www.reddit.com/r/programming/comments/1ghmr77/simple_sdl3_raycaster/)
Classic 3D videogame shadow techniques
https://www.reddit.com/r/programming/comments/1ghlapi/classic_3d_videogame_shadow_techniques/
submitted by /u/r_retrohacking_mod2 (https://www.reddit.com/user/r_retrohacking_mod2)
[link] (https://30fps.net/pages/videogame-shadows/) [comments] (https://www.reddit.com/r/programming/comments/1ghlapi/classic_3d_videogame_shadow_techniques/)
My Notes - Quick & Easy Notes
https://www.reddit.com/r/programming/comments/1ghhwh0/my_notes_quick_easy_notes/
submitted by /u/Nearby-Mix-7175 (https://www.reddit.com/user/Nearby-Mix-7175)
[link] (https://play.google.com/store/apps/details?id=com.merpower.mynotesapp) [comments] (https://www.reddit.com/r/programming/comments/1ghhwh0/my_notes_quick_easy_notes/)
pg_mooncake: columnstore table in Postgres writing iceberg/delta.
https://www.reddit.com/r/programming/comments/1ghfmub/pg_mooncake_columnstore_table_in_postgres_writing/
submitted by /u/InternetFit7518 (https://www.reddit.com/user/InternetFit7518)
[link] (https://github.com/Mooncake-Labs/pg_mooncake/) [comments] (https://www.reddit.com/r/programming/comments/1ghfmub/pg_mooncake_columnstore_table_in_postgres_writing/)
Made a video that should work as an intro to ROM hacking for translation for those interested!
https://www.reddit.com/r/programming/comments/1gheza4/made_a_video_that_should_work_as_an_intro_to_rom/
submitted by /u/jonko_ds (https://www.reddit.com/user/jonko_ds)
[link] (https://www.youtube.com/watch?v=CHE03KiiQ7k) [comments] (https://www.reddit.com/r/programming/comments/1gheza4/made_a_video_that_should_work_as_an_intro_to_rom/)
Debugging spiky memory in our backend
https://www.reddit.com/r/programming/comments/1gheinm/debugging_spiky_memory_in_our_backend/
submitted by /u/utpalnadiger (https://www.reddit.com/user/utpalnadiger)
[link] (https://www.linkedin.com/pulse/debugging-spiky-memory-our-backend-mohamed-habib-s8cye/?trackingId=7V%2FSeWVUSOKREniiJR8wKQ%3D%3D) [comments] (https://www.reddit.com/r/programming/comments/1gheinm/debugging_spiky_memory_in_our_backend/)
The Basics of Test-Driven Development with a Focus on Data Structures
https://www.reddit.com/r/programming/comments/1gh7pud/the_basics_of_testdriven_development_with_a_focus/
submitted by /u/albeXL (https://www.reddit.com/user/albeXL)
[link] (https://albexl.substack.com/p/the-basics-of-test-driven-development) [comments] (https://www.reddit.com/r/programming/comments/1gh7pud/the_basics_of_testdriven_development_with_a_focus/)
Raspberry Pi Performance Update: NUMA Memory Configuration Gains
https://www.reddit.com/r/programming/comments/1gh75fg/raspberry_pi_performance_update_numa_memory/
submitted by /u/itsmeront (https://www.reddit.com/user/itsmeront)
[link] (https://news.squeak.org/2024/11/01/raspberry-pi-performance-update-numa-memory-configuration-gains/) [comments] (https://www.reddit.com/r/programming/comments/1gh75fg/raspberry_pi_performance_update_numa_memory/)
Always-free Vue & Node admin panel framework
https://www.reddit.com/r/programming/comments/1gh2o4m/alwaysfree_vue_node_admin_panel_framework/
submitted by /u/Unerring-Ocean (https://www.reddit.com/user/Unerring-Ocean)
[link] (https://adminforth.dev/) [comments] (https://www.reddit.com/r/programming/comments/1gh2o4m/alwaysfree_vue_node_admin_panel_framework/)