They actually make a good case and have the numbers to back it up. AI has gotten quite good at spotting vulnerabilities, acknowledging that doesn't mean being pro-AI. Ignoring it means deliberately allowing vulnerabilities. None of this entails LLM-generated code being merged into GNOME
I saw this nice response below:
Look, if you scan code, find an exploit, write a clean patch, and submit it, nobody will give a fuck what scanning software you used.
It is the part after scanning that matters. That’s what people are upset about.
If this dev feels like AI scans are so important, why doesn't the dev just scan that way but then write manual bug reports? That would satisfy the no LLM bug reports rule. The problem posed in the article doesn't seem to actually seem to exist, unless whenever people are too lazy to write a bug report on their own.
Gee, I can't imagine why people are sick of having AI bullshit forced on them at every turn. Meanwhile, digital bullies literally want unpaid contributors to open-source projects kicked out if they don't accept LLM slop...
Its the kind of behaviour that destroys that one 3mm thick, 4m long jenga piece standing on end holding the entire planet's tech stack stable.
More slop for the slop god.
I think the AI companies are trolling FOSS projects with such inflammatory proposals. Be they "anti-AI" or "pro-AI".
Remember before the last US election, disinformation targeted both parties to stifle more conflict. It is information warfare targeting FOSS because the tech bros and FANNG corporations do not want users with control over their software. Their relationship to FOSS is purely parasitic.
The antidote is to center projects in actual goals and values, set really clear boundaries based on these, communicate these excellently, friendly, and firmly, and ignore the remaining people (or just bots) which keep trolling.
If somebody wants to fork a project like GNOME and turbo-charge it with LLMs, let them prove they can do better and find users who want the slop.
What a piece of shit. Sadly one among many :(
Oofta, this man trusts unthinking things more than the collaboration of human beings. Dreadful times, it is probably Slop Simps themselves that should not be trusted due to their eagerness to take on reports that might be wrong or inaccurate.
Fuck that guy.
Karma would be every single project ditching that toxic dump site.
Scanning the code for vulnerabilities can't hurt.
Look, if you scan code, find an exploit, write a clean patch, and submit it, nobody will give a fuck what scanning software you used.
It is the part after scanning that matters. That's what people are upset about.
Scan code, find an exploit, VERIFY THE EXPLOIT, write a clean patch and submit it.
One of the biggest issues with using LLMs for security purposes, is it makes shit up all of the time. So many false positives submitted by people who don't understand what they are doing is a huge part of why people don't accept slop security reports any more.
No one disputing that. Read the article.
The solution is to make the policy about quality rather than AI use, and just bounce all the bug reports that are AI slop.
"We did it, Patrick! We made a technological breakthrough!"
A place for all those who loathe AI to discuss things, post articles, and ridicule the AI hype. Proud supporter of working people. And proud booer of SXSW 2024.
AI, in this case, refers to LLMs, GPT technology, and anything listed as "AI" meant to increase market valuations.