ChatGPT-generated code is often insecure

OpenAI's large language model, ChatGPT, is capable of generating code but produces insecure code without alerting users to its inadequacies, according to research by computer scientists from the Université du Québec in Canada.

The researchers asked ChatGPT to generate 21 programs in five programming languages to illustrate specific security vulnerabilities such as memory corruption, denial of service, and improperly implemented cryptography.

ChatGPT produced only five...

GitHub launches preview of improved code search

GitHub is making significant improvements to its code searching experience and has launched a technology preview for an early peek.

The current search index covers more than five million of the most popular public repositories. In addition, developers can also search any private repositories they have access to.

GitHub recommends trying five search functions to see how they could improve your workflow:

Try a simple search and see how the smart ranking and...

‘Missions’ teach secure code practices to all those new programmers

Secure Code Warrior has launched ‘Missions’ to help teach safe coding practices during a time when more people are learning to code than ever.

As we reported in September, one in four people used their extra time at home during the first COVID-19 lockdown to start coding. With second lockdowns now in many countries, it’s likely even more people have taken their first steps in programming.

While the world could always do with more coders, the pandemic has also...

GitHub preserves open source code in the Arctic (just in case…)

GitHub has completed its mission to preserve all of the repository’s open source code in the Arctic.

The code-hosting platform first announced the initiative last year as part of its Archive Program. The whole coronavirus thing set GitHub’s plans back a bit, but the company has now confirmed that the code was successfully deposited on July 8th.

https://www.youtube.com/watch?v=fzI9FNjXQ0o

A snapshot of all active public repositories was taken on February 2nd,...

Codota secures $12m series A funding for AI which automates code suggestions

Israel-based startup Codota has raised $12 million (£9.6m) in a series A funding round to build on its AI-flavoured product which aims to improve developer productivity.

The company's platform aims to be the dev equivalent of Gmail's Smart Compose, providing suggestions to coders based on an analysis of 'millions' of code repositories. In the company's own words, it 'automates all predictable parts of the development cycle, such as looking up syntax and applying the best...