this post was submitted on 29 Mar 2026
44 points (78.2% liked)

Linux

13023 readers
716 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] artyom@piefed.social 32 points 12 hours ago (3 children)

Why can't we ignore it again?

[–] Vincent@feddit.nl 5 points 4 hours ago (1 children)

If these tools are indeed finding security issues, then ignoring them means someone else will find those issues - and abuse them.

[–] artyom@piefed.social 1 points 4 hours ago* (last edited 4 hours ago) (1 children)

Doesn't matter if they find security issues (they won't) if they're buried in a veritable haystack of false reports.

[–] Vincent@feddit.nl 2 points 1 hour ago

That's true. If they're not, though, or if they're easy to generate yourself, then you are kinda forced to pay attention though, if you care about the security of your project.

I don't have the expertise or experience to say whether that is true. But GregKH seems to think so, and other prolific projects seem to be coming to the same conclusions.

I get that it's attractive to think that AI isn't capable of it. But it's important that what you believe to be true is, and stays, based on reality rather than on what I wish is true. And it's especially important to be wary of when you really want something to be true.

[–] lambalicious 12 points 12 hours ago (3 children)

Unfortunately AI has gotten ahold of several projects so it's not as easy to ignore. And with Linux itself being on the list, it seems the time comes for the community to migrate to Haiko or BSD.

[–] communism@lemmy.ml 3 points 3 hours ago (1 children)

The reasons people use Linux are for qualities other than the ones affected by AI use. AI use has implications for code quality, correctness, and security. But none of those are why people use Linux. People use Linux over BSD or other Unixes because Linux supports the most hardware, has the biggest software ecosystem, and being a monolithic kernel is much easier to get up and running with lots of hardware without needing to install separate drivers. Those qualities still need to be addressed by BSDs or whatever alternatives before people will start migrating from Linux.

I say this as someone who regularly uses and enjoys an OpenBSD machine. I couldn't use it as my main machine because it just doesn't have the same software availability and plug-and-use hardware support as Linux. Porting software to a new target is not a trivial task for most users. I package a few things for the AUR and that's much easier as the software already supports x86_64 Linux; I just have to write a script to install it. I think OpenBSD is a nice OS but I highly doubt Linux users will migrate any time soon. Think about how many people were clinging onto X11 because Wayland didn't support their super specific workflow. And a migration to an entirely different OS would be worse.

[–] hexagonwin@lemmy.today 1 points 3 hours ago (1 children)

i usually use freebsd (haven't tried openbsd yet..) and its linux binary compat is almost perfect, it surprisingly just works for most things although there are some rough edges as a desktop.

[–] communism@lemmy.ml 1 points 1 hour ago

How's the firmware support/availability? For things like graphics tablets, graphics drivers, etc?

I don't think OpenBSD has binary compat with Linux but most Linux software should just need a recompile for BSDs—I'm discouraged from porting given that when it's not a simple recompile I'd have much less idea what to do.

[–] artyom@piefed.social 13 points 11 hours ago (2 children)

Unfortunately AI has gotten ahold of several projects

Why does that matter?

[–] lambalicious 1 points 1 hour ago

It reduces the foothold available for AI-free projects, in particular once "big enough" projects like Firefox or Linux get infected. Since there is significant inertia to switching to, or even developing, an alternative (a web browser might have been casual dev in 1998; right now it almost requires a Corporation to coast the development). Also it normalizes the idea of having AI in development, which is in itself dangerous.

[–] TacoSocks@infosec.pub 2 points 4 hours ago (1 children)
  • Legal Ramifications
  • Legal Cases And Law Problems
  • License Problems
  • Stolen Training Data
  • Environmental Impact
  • Labor
  • Poor Code Quality
  • Deskilling
  • Infosec risks
  • Healthy and Safety
  • Ties to the War Industrial Complex
  • Effects on Policing
  • Maintainer Fatigue
  • Effect on Hardware Prices

This website linked in the post you replied to lists a bunch of reasons.

[–] m532@lemmygrad.ml 2 points 3 hours ago

"Stolen"

Who has had their stuff taken away from, in a way that they don't have it anymore?

"But copying is actually exactly like plundering a whole ship" - RIAA

Copyright crusaders have always been pathetic bootlickers of capitalist middlemen parasites who enclose the commons and then demand ransom.

[–] misk@piefed.social 1 points 6 hours ago* (last edited 6 hours ago)

They list iTerm2 as affected but list Linux-specific terminal emulators only as replacement even if there are plenty of those on MacOS. At this point I think those lists are prepared by LLM boosters too.

[–] fruitycoder@sh.itjust.works 3 points 10 hours ago (1 children)

Because IF it is superuseful tool and you are being paid to dev then you will have to explain why. Like if a framer showed up to a construction site and refused to use power tools

[–] artyom@piefed.social 4 points 10 hours ago (1 children)

But its not. This is more like a framer showed up and you told him to go home so the power tools could build a house that looks like the fucking tower of Pisa.

[–] terabyterex@lemmy.world 10 points 9 hours ago (1 children)

this is noy how devs are using ai. they use it as a tool..

non devs may be using ai this way and the house falls apart.