I looked at the rsync commit log and basically every commit since March says "tridge and claude committed." Andrew Tridgell, the guy who literally invented rsync in 1996. Now hes using a chatbot to write the code and proudly displaying its name right there in the commit.
And before anyone goes "calm down its just a typo fix" no. The recent stuff is the security fixes for 3.4.3. The symlink race CVEs.. You know, the exact part where you want an actual human who understands what hes doing, not a machine that spits out code that looks correct but has correctness errors.
Do you get how insane this is? Rsync is the thing holding up basically every backup system on earth. Your NAS uses it. Distro mirrors use it. The server with you grandmas photos uses it. And now the plan is to let a token predictor that can't even count the amount of letter R's in "strawberry" write code for it.
"But the tests pass." The tests pass because the AI probably wrote the tests too you walnut. Its a loop of confident nonsense thats grading its own homework, and the first time it hits an edge case nobody fed it its gonna silently corrupt something and noone notices till the backups are already poisoned.
I'm pinning v3.4.1 and not updating again. If you defend this, dont say nobody warned you when the data loss posts start appearing.
But then what makes you assume they reviewed the output of human contributors for the last 30 years? What makes you assume anybody does?
Literal human interactions that are well documented through a peer review processes that has been standard for decades in the industry?
Like, this process doesn't have to be perfect. But the bar is really low when we're discussing "trust me bro" and seeing AI commits going in.
I don't understand. There's a ton of PRs on rsync where some rando contributed some code, tridge thanked them and the PR got merged. No comments, no conversation, just code => thanks => merged. How do you know any kind of peer review has happened before the merge ? What makes you trust that this specific rando on the internet didn't introduce any kind of regression or security issue ?
You likely have had rsync on your machines for years or even decades, and you didn't even know a guy called
tridgeexisted and you depended on them. You trusted them with your vital infrastructure. Did you audit the guy or personally review his various contributions ? Did you re-audit now and find some quality drop other than some screenshot on mastodon ?Changing opinions so radically on such flimsy evidence doesn't sound too rational to me. In fact it reeks of distinctly "right-wing thinking", a moral panic that tries to remain fact-free and exist in its own bubble universe with no willingness to connect to reality, because the outrage is too delicious to let facts ruin it. It sounds like a test of spiritual purity, not a discussion on engineering practices.