Downvoted. AI is not the issue here. It's the person behind it. They are supposed to find bugs and verify themselves. Instead they spammed the mailinglist.
Fuck AI
"We did it, Patrick! We made a technological breakthrough!"
A place for all those who loathe AI to discuss things, post articles, and ridicule the AI hype. Proud supporter of working people. And proud booer of SXSW 2024.
AI, in this case, refers to LLMs, GPT technology, and anything listed as "AI" meant to increase market valuations.
That's the increased efficiency we hear about.
If this really is the token burn future that the AI bros want, then why does it seem like such a disorganized, leaderless clusterfuck? Why has no one developed the "AI-native vulnerability reporting framework" to not destroy the most critical projects in FOSS?
It all seems terribly shortsighted. If Linux is affected, then a hundred other projects are on the ropes.
Even in the glorious AI powered future no one wants to work on docs
Yea, I fear for the future of open source. There may be some asymmetries built into LLM tech and its uses that simply undercuts the FOSS system as we know it.
There may be some asymmetries built into LLM tech
The amount of energy needed to refute bullshit is an order of magnitude bigger than that needed to produce it.
Basically, yea. As sometimes BS is right enough to find a vulnerability, but rarely good enough to patch it, kinda like finding a small leak compared to metal being welded to cover it.
They don't even have to be intentionally built in. Anything that generates unnecessary work for FOSS volunteers is a win for proprietary software companies.
Even an easy to use and well-built tool that produces good results would result in mailing list and bug report noise simply because people like to contribute. If we set aside those who are just trying to pad their resume with open source contributions and bad actors trying disrupt FOSS projects, we're still left with a lot of well-intentioned, mostly inexperienced devs generating duplicate and/or invalid reports and requests.
Since the current state of AI tools certainly does not produce consistently good results, I don't think organizations that are hostile to FOSS projects actually need to do anything at all for them to be disruptive. Just make their shitty tools accessible and other people will significantly contribute to maintainer burnout without even intending to.
“AI tools are great, but only if they actually help, rather than cause unnecessary pain and pointless make-believe work,” he wrote. “Feel free to use them, but use them in a way that is productive and makes for a better experience.”
That’s a pretty nuanced view. I agree, but I’m not sure how many people of this community do.
Bug reporting is going to have to start being an invite-only thing that you have to pass a video interview for first ... and in that interview, you'll need to demonstrate your ability and willingness to manually evaluate bugs before submitting them.
fuck gipity