GitHub

Judge grants subpoena to ID Twitter source code leaker

Unmasking also in store for anyone who's 'posted, uploaded, downloaded or modified' tweet biz code

Software29 Mar 2023 | 33

CISA unleashes Untitled Goose Tool to honk at danger in Microsoft's cloud

Not a headline we expected to write today

CSO24 Mar 2023 | 11

GitHub publishes RSA SSH host keys by mistake, issues update

Getting connection failures? Don't panic. Get new keys

Security24 Mar 2023 | 34

GitHub Copilot learns new tricks, adopts this year's model

Armed with GPT-4, Microsoft's AI 'pair programmer' can tag pull requests, parrot documentation, talk about code

AI + ML22 Mar 2023 | 14

The npm registry's safe word is Socket

Exclusive GitHub's JavaScript failings are someone else's opportunity

Devops16 Mar 2023 | 8

One third wiped off value of GitLab shares, Wall Street didn't like weaker outlook

Investors nervous in same week that Silicon Valley Bank failed

Devops14 Mar 2023 | 6

GitHub rolls out mandatory 2FA for loads of devs next week

Engineers who contribute to public projects told to enroll

Software09 Mar 2023 | 11

Frankenstein malware stitched together from code of others disguised as PyPI package

Crime-as-a-service vendors mix and match components as needed by client

Research03 Mar 2023 | 3

Who writes Linux and open source software?

Opinion Developers and, more to the point, the companies that employ them

OSes24 Feb 2023 | 111

GitHub claims source code search engine is a game changer

When grep isn't good enough, try Blackbird

Devops07 Feb 2023 | 51

GitHub CEO says EU AI Act shouldn't apply to open source devs

FOSDEM Lawmakers said to be trying to align on the basics by 'early March'

AI + ML07 Feb 2023 | 6

Microsoft, GitHub, OpenAI urge judge to bin Copilot code rip-off case

We're not the bad guys in this, Azure empire says with a straight face

Devops31 Jan 2023 | 25

Midjourney, DeviantArt face lawsuit over AI-made art

Updated Lawyer known for GitHub Copilot case to argue artists' legal struggle

AI + ML16 Jan 2023 | 60

Should open source sniff the geopolitical wind and ban itself in China and Russia?

Opinion Can it even do that? And does FOSS deserve an exemption to sanctions?

Software01 Jan 2023 | 216

Crooks copy source code from Okta’s GitHub repository

The hack wraps up a year of bad security incidents for identity

Security23 Dec 2022 | 13

Study finds AI assistants help developers produce code that's more likely to be buggy

At the same time, tools like Github Copilot and Facebook InCoder make developers believe their code is sound

Software21 Dec 2022 | 61

GitHub adds admin controls to Copilot, paints 'Business' on the side, doubles price

Ah, the enterprise way

AI + ML09 Dec 2022 | 22

WASP malware stings Python developers

Info-stealing trojan hides in malicious PyPI packages on GitHub

Research16 Nov 2022 | 9

GitHub sets up private vulnerability reports for public repos to avoid 'naming and shaming'

No need for ignominy when a flaw is found

Security14 Nov 2022 | 5

Microsoft moves to tighten Azure DevOps security with granular access tokens

Narrowing permissions could be difference between mildly pwned and totally pwned corporate network

Devops11 Nov 2022 |

GitHub's Copilot flies into its first open source copyright lawsuit

Opinion It won't be the last

AI + ML11 Nov 2022 | 91

Dropbox admits 130 of its private GitHub repos were copied after phishing attack

Personal info and data safe, stolen code not critical, apparently

Cyber-crime01 Nov 2022 | 2

Purpleurchin cryptocurrency miners spotted scouring free GitHub, Heroku accounts

This is why we can't have nice things

Research27 Oct 2022 | 14

AI programming assistants mean rethinking computer science education

Analysis Boffins say educators need to deal with opportunities and risks of GitHub Copilot and pals

AI + ML20 Oct 2022 | 27

How GitHub Copilot could steer Microsoft into a copyright storm

Special report AI-driven coding tool might generate other people's code – who knew? Well, Redmond, for one

AI + ML19 Oct 2022 | 75

Toyota dev left key to customer info on public GitHub page for five years

'Oh what a feeling' when your contractor leaks site source code

Security11 Oct 2022 | 8

AI co-programmers perhaps won't spawn as many bugs as feared

They can't be any worse than some human developers

AI + ML07 Oct 2022 | 17

No longer prepared to svn commit: WebKit migrates to GitHub

Apple's web engine to take advantage of Git’s distributed nature, GitHub’s large community

Devops01 Sep 2022 | 23

Merge requests and insecure GitHub workflows may lead to supply-chain attacks

Starting with Google Firebase and Apache Camel repos

Devops01 Sep 2022 | 8

Banned Tornado Cash code reuploaded to GitHub in free speech test

Cryptography prof tells Microsoft to get forked

Software24 Aug 2022 | 58

GitHub Copilot may be perfect for cheating CompSci programming exercises

Shakeup in teaching looms as code-completion tool lets students 'bring an Uzi to a knife fight'

AI + ML19 Aug 2022 | 58

GitHub courts controversy by suspending Tornado Cash developers and reneging on cookie commitments

If you're looking for free speech or privacy, move along

Software10 Aug 2022 | 59

FauxPilot: It's like GitHub Copilot but doesn't phone home to Microsoft

Updated And if you train your own AI model for it, you can worry less about licensing

Devops06 Aug 2022 | 20

Miscreants aim to cause Discord discord with malicious npm packages

LofyLife campaign comes amid GitHub security lockdown

Research02 Aug 2022 | 2

Even robots have the right to learn from open source

Opinion Just because it's Microsoft doesn't mean it's wrong

Software11 Jul 2022 | 68

Open source body quits GitHub, urges you to do the same

Paid-for Copilot trained on FOSS code final straw for Software Freedom Conservancy

AI + ML30 Jun 2022 | 94

Arrogant, subtle, entitled: 'Toxic' open source GitHub discussions examined

Analysis Developer interactions sometimes contain their own kind of poison

Devops29 Jun 2022 | 116

For a few days earlier this year, rogue GitHub apps could have hijacked countless repos

A bit of a near-hit for the software engineering world

Devops21 Jun 2022 | 5

GitHub's AI code assistant Copilot takes flight. And that'll be $10 a month, please

You wanna bug fix and chill?

AI + ML21 Jun 2022 | 19

RubyGems polishes security practices with multi-factor authentication push

Faced with rising software supply-chain attacks, package registries are locking things down

Devops16 Jun 2022 | 1

GitHub drops Atom bomb: Open-source text editor mothballed by end of year

Embrace, extend technology into other products ... and extinguish

Devops08 Jun 2022 | 58

GitHub saved plaintext passwords of npm users in log files, post mortem reveals

Unrelated to the OAuth token attack, but still troubling as org reveals details of around 100,000 users were grabbed by the baddies

Security27 May 2022 | 16

How to find NPM dependencies vulnerable to account hijacking

Security engineer outlines self-help strategy for keeping software supply chain safe

CSO23 May 2022 | 21

Email domain for NPM lib with 6m downloads a week grabbed by expert to make a point

Special report Campaign to coax GitHub-owned outfit to improve security starts showing results

CSO10 May 2022 | 47

GitHub to require two-factor authentication for code contributors by late 2023

Code locker has figured out it's a giant honeypot for miscreants planning supply chain attacks

Security05 May 2022 | 17

Communication around Heroku security incident dubbed 'train wreck'

Users claim lack of transparency following compromise of Github tokens

Security04 May 2022 | 5

Microsoft reanimates 1995's 3D Movie Maker via GitHub

Next Nadella keynote to be delivered by McZee?

Software04 May 2022 | 10

Watch out for AI models regurgitating misplaced keys that unlock crypto wallets

Effect of GitHub's OpenAI-powered Copilot memorizing sensitive but public data

AI + ML03 May 2022 | 4

So, what happened with GitHub, Heroku, and those raided private repos?

Analysis Who knew what when and what did they do?

Devops21 Apr 2022 | 10

GitHub's Dependabot learns to report bad news you can use

Instead of just raising the alarm, automated code-scold will flag where the fire is

Devops15 Apr 2022 |

GitHub tackles leaks by scanning for secrets in pushed code

Repo updates inspected for security blunders before some git can exploit them

Security05 Apr 2022 | 6

Dev rigs up receipt printer to spit out GitHub issues

Not the first time the letters POS have been associated with someone's repo

Software29 Mar 2022 | 25

GitHub explains outage string in incidents update

It was MySQL, with the resource contention, in the database cluster

Software24 Mar 2022 | 21

Complaints mount after GitHub launches new algorithmic feed

GitHub algorithm seeks to improve discovery. Developers disagree.

Software23 Mar 2022 | 40

This JavaScript scanner hunts down malware in libraries

Stick a fork in this Socket and zap malicious NPM packages

Security01 Mar 2022 | 2

GitHub puts prebuilt Codespaces into public beta

Say goodbye to your coffee break

Devops25 Feb 2022 | 3