129
Gee, I can't imagine why people are sick of having AI bullshit forced on them at every turn. Meanwhile, digital bullies literally want unpaid contributors to open-source projects kicked out if they don't accept LLM slop...
Its the kind of behaviour that destroys that one 3mm thick, 4m long jenga piece standing on end holding the entire planet's tech stack stable.
Oofta, this man trusts unthinking things more than the collaboration of human beings. Dreadful times, it is probably Slop Simps themselves that should not be trusted due to their eagerness to take on reports that might be wrong or inaccurate.
They actually make a good case and have the numbers to back it up. AI has gotten quite good at spotting vulnerabilities, acknowledging that doesn't mean being pro-AI. Ignoring it means deliberately allowing vulnerabilities. None of this entails LLM-generated code being merged into GNOME
I saw this nice response below:
Look, if you scan code, find an exploit, write a clean patch, and submit it, nobody will give a fuck what scanning software you used.
It is the part after scanning that matters. That’s what people are upset about.
If this dev feels like AI scans are so important, why doesn't the dev just scan that way but then write manual bug reports? That would satisfy the no LLM bug reports rule. The problem posed in the article doesn't seem to actually seem to exist, unless whenever people are too lazy to write a bug report on their own.
Good point. The article addresses this, their point is that the bar for sending reports in should be as low as possible and requiring re-authoring might make people not submit at all. While I agree with the author, that is still a debatable point though. I guess we would need to know how many valuable reports are actually lost by not allowing LLM-authored vulnerability reports, which is hard to do quantitatively
their point is that the bar for sending reports in should be as low as possible
Why?
Look: The bottleneck is not the number of reported possible issues, but the time, attention, and sustainable workload for the GNOME maintainers and developers. Anything that minimizes the latter is good.
Also, if LLM tools really continue to improve a lot (which is doubtful IMO), a shitty, half-assed, inconplete, ill-described bug report of today that is not attended to, due to its deficit, is not lost: If the bug is real and persists, due to the proclaimed future advancements in LLM technology, maintainers will receive another much much better bug report which causes less work in a year or two. Since maintainer's work capacity is the real bottleneck, this is a clear win!
That's a fucking stupid argument. If the issue is worth addressing, the issue is worth writing up an issue.
LLM-authored issues are the absolute fucking worst. I can't tell you how many times I've had to deal with either completely fabricated issues or issues where the LLM generates bullshit "details" as though it actually investigated the issue, making it next to impossible to determine what is real or not.
It's not that fucking hard to just write up issues you find. We've been doing it for decades just fine, jfc.
What a piece of shit. Sadly one among many :(
More slop for the slop god.
Fuck that guy.
I think the AI companies are trolling FOSS projects with such inflammatory proposals. Be they "anti-AI" or "pro-AI".
Remember before the last US election, disinformation targeted both parties to stifle more conflict. It is information warfare targeting FOSS because the tech bros and FANNG corporations do not want users with control over their software. Their relationship to FOSS is purely parasitic.
The antidote is to center projects in actual goals and values, set really clear boundaries based on these, communicate these excellently, friendly, and firmly, and ignore the remaining people (or just bots) which keep trolling.
If somebody wants to fork a project like GNOME and turbo-charge it with LLMs, let them prove they can do better and find users who want the slop.
Karma would be every single project ditching that toxic dump site.
Scanning the code for vulnerabilities can't hurt.
Look, if you scan code, find an exploit, write a clean patch, and submit it, nobody will give a fuck what scanning software you used.
It is the part after scanning that matters. That's what people are upset about.
Scan code, find an exploit, VERIFY THE EXPLOIT, write a clean patch and submit it.
One of the biggest issues with using LLMs for security purposes, is it makes shit up all of the time. So many false positives submitted by people who don't understand what they are doing is a huge part of why people don't accept slop security reports any more.
No one disputing that. Read the article.
The solution is to make the policy about quality rather than AI use, and just bounce all the bug reports that are AI slop.
this post was submitted on 04 Oct 2026
129 points (97.1% liked)
Fuck AI
8396 readers
2402 users here now
"We did it, Patrick! We made a technological breakthrough!"
A place for all those who loathe AI to discuss things, post articles, and ridicule the AI hype. Proud supporter of working people. And proud booer of SXSW 2024.
AI, in this case, refers to LLMs, GPT technology, and anything listed as "AI" meant to increase market valuations.
founded 2 years ago
MODERATORS