204
Linus Torvalds says AI-powered bug hunters have made Linux security mailing list ‘almost entirely unmanageable’ (www.theregister.com)
submitted 5 months ago by to c/linux@lemmy.zip
17 comments fedilink hide all child comments
 

Multiple researchers using the same tools to find the same bugs are creating ‘unnecessary pain and pointless work’

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 5 months ago (4 children)

Yeah, there's a ton of spam now. My view is that devs should use LLMs themselves to scan for issues, and then see if there's anything to fix. But when it comes to accepting reports or patches, you kind of have to be selective. A lot of the time stuff LLMs will flag can be either hallucinated, or not really an issue. A lot of the reports come from automated systems that don't really do any due diligence to figure out if something is an actual issue that needs addressing. So, I can definitely understand why projects might want to stop accepting random bug reports or code submissions going forward.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 7 points 5 months ago (1 child)

    Fully automated systems that file issues sound like a nightmare. I hope it’s easy to ban those as they appear.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 5 months ago*

    Yeah, honestly that's the dumbest thing anybody could think of. It's just a pure waste of resources that wastes people's time. Even if these systems find genuine issues, the sheer volume of spam ensures nobody is going to actually look at them.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 5 months ago (1 child)

    I figured you'd probably be sympathetic.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 11 points 5 months ago

    The next few years are going to be interesting because we're moving into uncharted territory in a lot of ways. There's a ton of hype around LLMs, and tons of people abusing this tech in every which way, and then there are useful nuggets where people figure out how to apply it effectively. Eventually we'll need to figure out how to suppress the noise and how to start using these things in productive ways.

  • permalink
  • fedilink
  • source
  • parent