110
This is really serious, something this essetial can't be AI Vulnerable, save OSS (infosec.pub)
submitted 8 months ago by to c/opensource@programming.dev
16 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 35 points 8 months ago (3 children)

The issue is the barrier to entry for creating shit PRs has almost vanished while reviewing those PRs for quality by a human being hasn't, so it pushes undue burden on the maintainers. See blog posts by Daniel Steinberg (maintainer of curl) for example.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 6 points 8 months ago* (last edited 8 months ago) (2 children)

    Far be it from me to argue with Steinberg, fair enough. I must be wrong.

    I guess I just don't see how there was ever a barrier in the first place. The amount of juniors who couldn't code their way out of fizzbuzz who think they are geniuses has exploded in recent years, I largely count myself amongst them too, with job interviews being as competitive as they are, and a big old green commit history being seen as a plus and people buying stars and such, I just don't see how this was anything but an eventuality with or without AI, not unlike the endless barely valid CVE slop too.

    For instance of the latter, if CISA(!) can issue federal government advisories for critical CVEs that don't exist, based on unverified claims from one empty chinese GitHub, I find it odd to think AI would make the situation substantially worse.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 8 months ago (1 child)

    My theory is that it is much psychologically easier to publish something you put little effort into and is mostly not your own work. Ego related fears are a strong motivator. Or maybe it's just a question of volume, idk.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 8 months ago

    Idk seeing the amount of intellectual dishonesty and lack of integrity people have nowadays I strongly doubt that former hypothesis, I feel like an idiot because I do things the hard way because I believe it to be beneficial for my personal growth while hordes of people claim to be geniuses with less than no information on a subject.

    I think the latter is it.

  • permalink
  • fedilink
  • source
  • parent