Opt out on one account, use another as poison. If you're gonna do this, I'd say move all your code to a new account and use the older account to poison - that way they can't filter the bad out by account age.
It's great. I also self-host my own Forgejo (that's the software Codeberg runs on) instance for private repos, to avoid using up space on Codeberg's servers.
Main problem is the lack of federation, leading to splintering across Codeberg/GitLab/sourcehut/self-hosted forges. I know there's Radicle, and Forgejo is working on ActivityPub integration, but it's slow-moving to get what should be inherently federated by design (git) to actually be federated. In practice you need accounts on a dozen different websites if you want to regularly contribute to foss.
I always wonder at this and have cautioned my managers repeatedly. Yes, we have a contract, but they have a literal army of lawyers and we have less (one lawyer one retainer for hourly work or a small grouping focused on taxes and employment law). As if our ownership won't bend over backwards to avoid suing a large company like Google, AWS, Microsoft, or Oracle. (Maybe OpenAI and Anthropic are sue-able by a $100 million corp?)
As proof I offer the lawsuits between businesses that have proceeded far enough the general public has heard about them. Not a specific one, just all of them.
If you use Microsoft 365 or Google Workspace etc then they already have all your data anyway. Most businesses have to trust other companies and the contract at some point.
The only other option is to use Open Source self hosted everything which is beyond most people’s ability.
fun fact, if you've ever accidentally clicked the "enable" button on copilot because you're a dumbass who can't read, you get a shitton of more settings, most of which are locked to "enabled".
Even with that setting on, nothing would be done unless you explicitly assign a Github task to Copilot. Even then, the worst thing that would happen is you'd get a pull request at some point if you somehow accidentally assigned a task to Copilot.
Got this email last night and felt validated for never uploading any code to GitHub because I don’t trust Microsoft. lol
I don’t have any big coding projects, but I self-host a ForgeJo server in my mini rack at home behind a Twingate VPN.
I live in the smack middle of the South in USA, so my brain automatically says “forge Joe” with the space and everything haha.
But I get ya, thank you for explaining!
I'm torn between wanting to opt-out because it's morally correct, or remaining opted-in so I can poison AI models with my terrible code.
Don't forget to teach it obscenities and yell at it whenever it fucks something up!
Nah, guarantee the models have rules built in to deal with obvious stuff like that.
You need to be more subtle. Give them information that is slightly wrong.
Perhaps by generating a bunch of complex copilot code to upload. It's easy to mass produce and would look plausibly functional.
Training AI models on AI content is the fastest route to model collapse.
... and tell it things, that are slightly obscene
Just need to use less obvious insults, a la, "your mother was a hamster, and your father smelt of elderberries"
Still poisons the model with something an end user won't like, but isn't easy enough to train out
Artisanal crap code.
Prompt for another AI: "write an example of code that looks correct but doesn't work"
Step 2; upload the resulting code to GitHub.
Step 3: make this an automated task.
Chaotic good
Name all your variables poorly and with swear words
You're using copilot??
No, you don't have to use it for it to take your code for training.
Yeah all you have to do is commit anything to GitHub
They’re scraping all the code regardless of your preferences. I guarantee it.
All open source software is being scraped, on github or not!
Step one: Download a C or CPP repository.
Step two: Replace all semicolons with a greek comma.
Step three: ??
Step four: Poison Copilot, so that it randomly insert greek comas that the compilers totally choke on.
Don't worry, the models already spit out poor code quality.
Por qué no los dos?
Opt out on one account, use another as poison. If you're gonna do this, I'd say move all your code to a new account and use the older account to poison - that way they can't filter the bad out by account age.
Opted Out and moved all to codeberg
How is codeberg?
Has everything I need, but not more
My god, this is such a positive review these days.
i love codeberg, though i haven’t had a chance to test the collaboration features all that much
It's great. I also self-host my own Forgejo (that's the software Codeberg runs on) instance for private repos, to avoid using up space on Codeberg's servers.
Main problem is the lack of federation, leading to splintering across Codeberg/GitLab/sourcehut/self-hosted forges. I know there's Radicle, and Forgejo is working on ActivityPub integration, but it's slow-moving to get what should be inherently federated by design (git) to actually be federated. In practice you need accounts on a dozen different websites if you want to regularly contribute to foss.
Link for opting out: https://github.com/settings/copilot/features
In the "Privacy" section, set "Allow GitHub to use my data for AI model training" to "Disabled".
Illusion of choice. That setting will, totally unbeknownst to them, enable itself.
It seems to be off by default if you've already opted out of Copilot entirely. Definitely still a reminder I should set up my own git though
I run mine on a raspberry pi zero - wasn’t terrible to set up.
If you’re a business with a contract with them it should state that they won’t use your data to train their models.
If you’re using the free service then you’re right that it’s safe to assume that your data was already being used.
I always wonder at this and have cautioned my managers repeatedly. Yes, we have a contract, but they have a literal army of lawyers and we have less (one lawyer one retainer for hourly work or a small grouping focused on taxes and employment law). As if our ownership won't bend over backwards to avoid suing a large company like Google, AWS, Microsoft, or Oracle. (Maybe OpenAI and Anthropic are sue-able by a $100 million corp?)
As proof I offer the lawsuits between businesses that have proceeded far enough the general public has heard about them. Not a specific one, just all of them.
You have to trust the contract.
If you use Microsoft 365 or Google Workspace etc then they already have all your data anyway. Most businesses have to trust other companies and the contract at some point.
The only other option is to use Open Source self hosted everything which is beyond most people’s ability.
There are more options than the two you mentioned. Listing a few as more people should remember them. I did get a bit off topic....
As soon as Microslop got involved I pulled all my repos and left.
fun fact, if you've ever accidentally clicked the "enable" button on copilot because you're a dumbass who can't read, you get a shitton of more settings, most of which are locked to "enabled".
Even more fun fact, if you never clicked the "enable" button on Copilot, most of those settings are locked to "enabled" anyway.
yeah you just can't see them. fun!
Yes I just found that this morning. Time to seriously look at the GitHub alternatives.
Also another setting under CoPilot>Coding Agent - turn off for All Repositories - mine was set to On.
Even with that setting on, nothing would be done unless you explicitly assign a Github task to Copilot. Even then, the worst thing that would happen is you'd get a pull request at some point if you somehow accidentally assigned a task to Copilot.
Got it. I didn't read too far in it. I saw the option to turn something copilot-related off, so I took it!
Thanks for providing an explanation.
i will not dispute the dumbass part but i have been programming professionally in python for 16 years. doesn't mean my code is any good, of course.
I mean if it wants some absolutely abysmal code then look no further.
Hell yeah, I hope I contributed to some bot somewhere absolutely flailing to provide a good python snippet.
makes me want to fill my repos with absolute garbage code.
Way ahead of you
Got this email last night and felt validated for never uploading any code to GitHub because I don’t trust Microsoft. lol I don’t have any big coding projects, but I self-host a ForgeJo server in my mini rack at home behind a Twingate VPN.
FYI: it is not “ForgeJo”
Forgejo is derived from Esperanto where the “ejo” suffix means “place”. The J is pronounced like y is in English.
It’s “forge-ejo” not “forge-joe”
No, it's pronounced ForJayHo.
That's how I pronounce it in my head. Spanish J is pronounced with an H sound, and Spanish isn't a fake language like Esperanto.
I live in the smack middle of the South in USA, so my brain automatically says “forge Joe” with the space and everything haha. But I get ya, thank you for explaining!
If you're still om github, you're kinda doing for it.
Microsoft:
Fully automating supply chain attacks since (at least) 2026.
I kind of wish we'd get some copilot discounts if we opt in