69

For those outside the loop: rsync starting using AI agents to handle the influx of AI security reports to improve the test suite and fix bugs. It introduced a few CVEs and people who never contributed in any way started firing shots at the maintainer.

rsync maintainer's response to the people getting pissy about his usage of AI: medium and the related post on programming.dev

you are viewing a single comment's thread
view the rest of the comments
[-] poVoq@slrpnk.net 18 points 2 months ago

Taking a project that works fine and making it actively worse by introducing AI made bugs is imho a valid reason to hard fork. The maintainer might not owe you anything, but it shows very poor judgement to slopify a good project like rsync this way.

[-] sp3ctr4l@lemmy.dbzer0.com 3 points 2 months ago

Enjoy maintaining your hard fork!

[-] terabyterex@lemmy.world 0 points 2 months ago

how did he slopify anything? he got a huge invtease in contributions and used a tool to help weed out slop.

[-] poVoq@slrpnk.net 12 points 2 months ago

They could have just refused merging slop. Rsync didn't need these "contributions".

[-] Zos_Kia@jlai.lu 1 points 2 months ago

What about the 6 critical security bugs he fixed in that release. Didn't rsync need those "contributions"?

[-] poVoq@slrpnk.net 1 points 2 months ago

The "critical" bugs that I have recently seen being found by AI were all extremely unlikely to be exploitable under realistic assumptions 🤷

[-] Zos_Kia@jlai.lu 1 points 2 months ago

Which of the CVEs in question are you referring to?

[-] poVoq@slrpnk.net 1 points 2 months ago

The ones in Nginx and the Linux kernel.

[-] Zos_Kia@jlai.lu 1 points 2 months ago

I mean the ones in the latest release of rsync, tf does nginx have to do with anything ?

[-] poVoq@slrpnk.net 1 points 2 months ago

I have not looked at the CVEs in Rsync specifically, but given the deludge of "critical" security issue found by AI lately that have been mostly nothing burgers, I am near certain the same applies to those included in that Rsync patchset.

[-] Zos_Kia@jlai.lu 1 points 2 months ago

It must be nice to have technical opinions that don't need to be grounded in facts. Why would you check your assumptions when you can just vibe.

[-] poVoq@slrpnk.net 1 points 2 months ago

Nice that you are so self aware 😅

this post was submitted on 05 Jun 2026
69 points (87.9% liked)

Opensource

6626 readers
222 users here now

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

CreditsIcon base by Lorc under CC BY 3.0 with modifications to add a gradient



founded 2 years ago
MODERATORS