The conversation

Business & incomeExperience excerpt · English

I know that no one else in the whole world did this because when I did it originally I looked for it

… I know that no one else in the whole world did this because when I did it originally I looked for it. And all I found were content provider marketing material. Nothing else. So I built it from scratch, put the code on client's private repos and that was it. Until recently the new client asked for similar integration, as I have already done that sort of thing I was happy to do it. They said they already have the core part ready and want help on finishing it. I was happy and curious, happy that someone else did the process and curious about their approach. They mentioned it was done by their in house team interns. I was shocked, I am no genius myself but this was not something that a junior engineer let alone an intern could do. So I asked for access to code and I was shocked again. This was same code that I wrote earlier with the comments intact. Variable spellings were changed but rest of it was the same.

Original discussionGitHub MCP exploited: Accessing private repositories via MCP297 source comments · at import
5

What was this responding to?

Parent context · original excerpt

AN

Related: https://simonwillison.net/2025/May/26/github-mcp-exploited/

Full original

Community replies 0

No community replies yet. Add your perspective.

Replies from the source 5

Direct replies available in this import. Original-language excerpts.

AU

If you found your exact code in another client’s hands then it’s almost certainly because it was shared between them by a person. (EDIT: Or if you’re claiming you used Copilot to generate a section of code for you, it shouldn’t be surprising when another team asking Copilot to solve the same problem gets similar output) For your story to be true, it would require your GitHub Copilot LLM provider to use your code as training data. That’s technically possible if you went out of your way to use a Bring Your Own Key API, then used a “free” public API that was free because it used prompts as training data, then you used GitHub Copilot on that exact code, then that underlying public API data was used in a new training cycle, then your other client happened to choose that exact same LLM for their code. On top of that, getting verbatim identical output based on a single training fragment is extr…

Full original
1O

thinking a non enterprise GH repo to be out of reach from Microsoft is like giving your phone for Facebook authentication and thinking they won't add it to their social graph matching.

Full original
6A

In GitHub Co pilot if we say dont use my code option for training does this still leaks your private code?

Full original
ZY

> I know that no one else in the whole world did this because when I did it originally I looked for it. Not convincing, but plausible. Not many things that humans do are unique, even when humans are certain that they are. Humans who are certain that things that they themselves do are unique, are likely overlooking that prior.

Full original
YE

It seems you're implying Github Copilot trained on your private repo. That's a completely separate concern than the one raised in this post.

Full original
Continue on Hacker News

Respect different perspectives. Share concrete experiences.

Sign in to post, reply, repost, and quote.