Originally Published 4 months ago — by Hacker News
Angry GitHub users criticize the forced integration of Copilot features, highlighting resistance to AI-driven tools in software development, skepticism about the hype, and concerns over corporate push for AI adoption without clear benefits or consideration of costs and user preferences.
GitHub CEO Thomas Dohmke announced he will step down by the end of the year to become a founder again, with GitHub now reporting to Microsoft executives as the company continues to grow despite increasing competition in AI tools for programmers.
Microsoft is integrating GitHub more closely into its CoreAI team following the resignation of GitHub CEO Thomas Dohmke, who is leaving to start a new venture. GitHub, previously operated as a separate entity since its 2018 acquisition, will now have no CEO and will report directly to Microsoft's CoreAI leadership, signaling a shift towards deeper AI integration within Microsoft’s development ecosystem.
GitHub accidentally leaked details about OpenAI's upcoming GPT-5 models, which will feature four variants designed for different tasks, including reasoning, coding, speed, and conversational AI, with an official launch expected soon.
Google has officially launched its AI coding agent Jules out of beta, now integrated with GitHub and capable of fixing or updating code, with structured pricing plans and improved stability based on user feedback.
GitHub CEO Thomas Dohmke warns developers to embrace AI or risk obsolescence, emphasizing that AI is transforming software development from coding to managing AI outputs. He highlights a shift in developer roles towards AI integration, advocating for early adoption to stay relevant in an evolving industry, and suggests that those resistant to change may need to consider other professions.
A malware campaign by Stargazers Ghost Network targets Minecraft players with fake mods and cheats, infecting Windows devices to steal credentials, tokens, and cryptocurrency wallets through malicious Java and .NET payloads distributed via GitHub repositories and Pastebin links, with a focus on evading detection and exfiltrating data to Russian-controlled servers.
A malware campaign targeting Minecraft players involves malicious GitHub repositories masquerading as mods, delivering Java loaders that download second-stage stealers capable of exfiltrating credentials, tokens, and system information, affecting over 1,500 devices and highlighting risks in gaming communities.
The U.S. government is developing a website and API called 'ai.gov' to promote AI integration across federal agencies, with plans to launch on July 4. The project, led by GSA's Technology Transformation Services, aims to incorporate AI tools from OpenAI, Google, Anthropic, AWS, and Meta, including an AI-powered chatbot. Leaked code and early website versions reveal ambitious plans to use AI for government innovation, but internal reactions have been largely negative due to concerns over security, bugs, and contract analysis.
Hendrik Kleinwächter's "The Bread Code" offers a comprehensive framework for sourdough baking, emphasizing understanding the science behind bread-making rather than just following recipes. The project includes a detailed open-source book, "The Sourdough Framework," available on GitHub, which provides extensive resources like flowcharts and timelines to help bakers troubleshoot and perfect their bread. Kleinwächter's approach encourages patience and learning, moving away from quick-fix solutions to foster a deeper appreciation for homemade bread.
Google accidentally published internal technical documents on GitHub, revealing details about how its search engine ranks webpages. The SEO community is both excited and upset, as the documents contradict some of Google's previous statements. The leak, which includes API documentation for Google's "ContentWarehouse," was released under an Apache 2.0 license, making it freely available. The documents suggest factors like click-through rates and whitelists affect rankings, leading to concerns about potential manipulation of search results.
GitHub has patched a critical security flaw in its Enterprise Server software that scored a 10 out of 10 on the CVSS severity scale. The vulnerability, identified as CVE-2024-4985, affects instances using SAML single sign-on with encrypted assertions, allowing attackers to gain full admin access. The issue impacts versions prior to 3.13.0, and GitHub learned about it through its bug bounty program, potentially rewarding the discoverer up to $30,000 or more.
Google has launched Code Assist, an enterprise-focused AI code completion and assistance tool that competes directly with GitHub's Copilot Enterprise. Code Assist, a rebrand and major update of Google's previous Duet AI service, offers a million-token context window for more accurate code suggestions and the ability to reason over and change large chunks of code. It can be fine-tuned based on a company’s internal code base and supports codebases on-premises and across different services. Additionally, Google also announced Gemini Cloud Assist to help cloud teams design, operate, and optimize their application lifecycle.
GitHub's chief legal officer, Shelley McKinley, is heavily involved in legal matters surrounding AI, including the EU AI Act, which aims to regulate AI applications based on their risks. GitHub has been vocal about concerns that the regulations could create legal liability for open source software developers. McKinley's role also involves overseeing accessibility, environmental sustainability, and trust and safety issues. GitHub's AI-enabled pair-programming tool, Copilot, has sparked controversy within the developer community, with concerns about copyright violations and attribution. The EU AI Act now includes exemptions for open source AI models, but the impact on developers and open source technology remains to be seen.
Cybersecurity researchers have discovered GitHub repositories offering cracked software used to distribute the RisePro information stealer. The repositories, which have since been removed, contained RAR archives with an installer file that unpacks the next-stage payload, injecting RisePro into system processes. RisePro is designed to gather sensitive information and exfiltrate it to Telegram channels. This discovery comes amid a rise in popularity of information-stealing malware, which are increasingly used as the primary vector for ransomware and high-impact data breaches.