Yes, he literally demands devs who don't accept LLM security reports to be removed from the project.

Projects that continue to prohibit AI-generated vulnerability reports are no longer suitable dependencies for GNOME, and should be developed someplace other than GNOME GitLab.

you are viewing a single comment's thread
view the rest of the comments
[+] -10 points 1 month ago (1 child)

That's actually the best use of AI.

Ban AI contributions because of the copyright risk. But there's no risk in getting code analysis from AI.

Worst case it's just noise. Best case, it'll find unauthenticated RCEs.

  • source
  • hideshow 1 child comment
  • [–] [S] 9 points 1 month ago

    If you want to interact with the autoconfabulator that is your decision, I would prefer you didn't and I would very much like you not feeding my work into one of those things but whatever. If you can come up with a valid report that way and write a proper bug report, I can work with that. What I take massive issue with is mandating everybody to use LLMs and calling for their removal from the project if they do not want to do that.

  • source
  • parent