top 95 comments

sorted by: hot top controversial new old
[–] 196 points 2 months ago*

Respect to Antoine. Having principles that are worth a damn is a rare trait amongst developers these days.

  • source
  • [–] 231 points 2 months ago (23 children)

    The without disclosure part tells everything you need to know here. If it's such a benign and maybe even beneficial thing to do then why are you hiding it? What possible reason could you have not to label that? In an open source Community shouldn't everything like that be known?

  • source
  • hideshow 23 child comments
  • [–] 57 points 2 months ago (9 children)

    I wonder what's the reason to make it optional? I think I've seen this approach with other projects as well. Isn't transparency and accountability a good thing? Also, this kind of information helps immensely when reading pull requests or silly bug reports. And Debian acknowledge there might be licensing issues. So it might become some sort of liability to them once it taints everything and we can't even tell?! So why? What's the upside? Adorn oneself with borrowed plumes and not being forced to disclose the fact? Or too much bookkeeping?

  • source
  • parent
  • hideshow 9 child comments
  • [–] 31 points 2 months ago (4 children)

    I think it's just the simple fact that there's no way to enforce it

  • source
  • parent
  • hideshow 4 child comments
  • [–] 24 points 2 months ago* (last edited 2 months ago)

    There are ways to enforce it. Yeah, you won't be able to make everyone follow the rule, but it's the same with any law and any public policy and they're still valuable. You don't make campaigns against DUI because you expect everyone to stop doing it, as that's a nirvana fallacy, you make them because you expect them to reduce DUI.

  • source
  • parent
  • [–] 3 points 2 months ago (3 children)

    Because the idea is to judge the code by its quality, not by who or what wrote it.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 13 points 2 months ago* (2 children)

    I think that's a commendable effort. Usually I do it the same way. Just feels massively unfair to me towards human contributors. I've seen the AI pull requests and bugreports come in. And it's very time consuming to deal with them. They're long, convoluted, touch a lot of code... There's frequently a good amount of "hallucinations" in them, because they're sent in autonomously or by people who don't know what they're doing. There might be dozens of them in quick succession as with the larger projects. They eat up time and effort which is now missing to deal with human contributions or wishes. My own opinion is: Transparency would help a lot to prioritize stuff. I mean AI isn't sentient, and as long as that holds true, I'd rather treat people with respect and the amount of attention they deserve... (In contrast to a level playing field between human and machine... Because the machines will easily beat us by sheer volume.)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 2 months ago (1 child)

    True, but I think the kind of people who send those monster PRs either already have AIs cosign it or they aren’t reading the policy anyway. There have also been a number of studies that show LLMs usually ignore this kind of instruction.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 months ago*

    Hmmh. Sure. People also deliberately instruct their agents not to reveal the fact. I can empathize with that, because there's all these people out there yelling at you, and launching shit storms.

    I believe the uptake in "co-authored by ..." is due to some companies making it the default setting in their frameworks. It's to some degree Microsoft being nice to us, not necessarily benevolence of the people sending in those PRs. Doesn't really matter to me though. It's enough to make me happy if that's attached to some commit or PR. I don't care how it got there, as long as it fits the purpose.

    Edit: And thanks for your comment. I don't think I agree. Nonetheless this might be the answer to my question.

  • source
  • parent
  • [–] 20 points 2 months ago (2 children)

    There are so many levels of LLM involvement and once you make this distinction you actually have to devote some of your limited resources to define and enforce it. So I think it might not be strictly beneficial, but possibly also have downsides.

    Where would you draw the line at which point it counts as LLM involvement? Having one run as some sort of spell/syntax checker? Doing some research (and being influenced by it) before hand coding something? Having it create a working prototype and then reimplementing it by hand? If you use code from somewhere else to solve a problem and ai use has not been disclosed for this code, do you automatically have to assume LLM usage was involved or is there plausible deniability?

    I think in the end you'd have to use too many resources check it and debate where the line is drawn, when the real question is how you retain human knowledge and engagement within your community.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 19 points 2 months ago (1 child)

    Just disclose how you used it.

  • source
  • parent
  • hideshow 1 child comment
  • [–] -2 points 2 months ago*

    "Just" like with GDPR, "just" follow the rules for personal data management. In reality, compliance stuff like that is expensive to implement.

    So if you are going to require it, don't pretend it is without cost. Which is exactly what you seem to be doing.

  • source
  • parent
  • [–] 9 points 2 months ago (1 child)

    We saw this play out with GMO foods:

    If it’s such a benign and maybe even beneficial thing to do then why are you hiding it? What possible reason could you have not to label that?

    later:

    It's specifically labelled, therefore it must be bad right? If we didn't need to worry about it, it wouldn't be labelled.

  • source
  • parent
  • hideshow 1 child comment
  • [+] -23 points 2 months ago (6 children)

    Conversely... if it's so benign, why should it have a label?

  • source
  • parent
  • hideshow 6 child comments
  • [–] 31 points 2 months ago (4 children)

    Not really worth discussing - it’s not benign, and it can be made purposefully not benign by a third party without notification or knowledge. A third party who has already demonstrated a penchant for world domination, both technologically and physically.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 2 months ago* (1 child)

    I should hope that open source developers are exclusively using open source models that are trained on open source projects.

    I mean, I would think, at least. It seems to me that most of the people in charge of big projects are usually FOSS purists.

    That's part of the reason why AI scrapers are breaking the small web. FOSS purists really have no significant defense against it aside from Anubis.

    Real DoS protection comes from capacity, which costs serious dollars, especially in this day and age where botfarms can be hired by the hour for rather cheap and record-breaking attacks seem to happen like monthly.

    The alternative is using a CDN, but there are none that align with FOSS ideals. And for CDNs to be really effective, you need them to break open TLS and handle the decrypted traffic, which raises privacy concerns on top.

    But anyways...most license agreements would make it a requirement that if you're using an open-source model, that it be properly attributed, right?

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 18 points 2 months ago* (last edited 2 months ago)

    I should hope that open source developers are exclusively using open source models that are trained on open source projects.

    Most developers who use these tools (even FLOSS developers) appear to be using the corporate owned models that were definitely trained on both proprietary source code and code that is incompatible with the GPL license. Some EU courts have also already judged that LLM code cannot be copyrighted, which also means it cannot be licensed as GPL.

    Currently, all code generated with an LLM has a 3 to 10% chance of unknowingly plagiarizing the copyrighted code it was trained on, and any FLOSS project that uses it is making a huge gamble that their codebase won't be scanned by corporations in the future looking for violations to sue about, shut down rival FLOSS projects, etc.

  • source
  • parent
  • [–] 145 points 2 months ago (10 children)

    The world needs more people that act on principles and take a stance.

  • source
  • hideshow 10 child comments
  • [+] -41 points 2 months ago (9 children)

    Weird that he didn't care when Linus Torvalds adopted basically the same policy to the kernel that serves as the foundation of the main Debian distribution. I have an inkling that there is more going on at Debian, not LLM use alone.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 54 points 2 months ago (8 children)

    didn't he? have you checked?

    the main thing is that it's an upstream problem. the linux kernel is used in nuclear missiles. if you want to stay on that kernel you have to take what you are given. in your own organisation you can at least try to change things.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 13 points 2 months ago (1 child)

    the linux kernel is used in nuclear missiles

    source:

  • source
  • parent
  • hideshow 1 child comment
  • [–] -2 points 2 months ago

    He didn't leave the Linux-based OS for Linus Torvalds himself stating a similar policy for the Linux kernel before Debian did.
    Debian has a history of maintaining ancient kernels. But it's hard to believe that he assumed Debian to just fork Linux...

  • source
  • parent
  • [+] -12 points 2 months ago (2 children)

    If he resigned only now, he didn't resign before. What is there to check? That is common sense. Linus allowed LLM use and he was fine with Debian building on it. After all, all LLM use is literal fascism in his eyes.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 80 points 2 months ago*
    [–] 18 points 2 months ago (8 children)

    And here I was suspecting myself of looking for elitism for my thoughts of switching to some *BSD system

  • source
  • hideshow 8 child comments
  • [–] 7 points 2 months ago (6 children)

    the distro you like is enshitifying so you're switching to an OS with an even more permissive, business-friendly license, huh? why not find another GPL OS instead?

  • source
  • parent
  • hideshow 6 child comments
  • [–] 2 points 2 months ago

    because I am not switching. another Linux project gives out some suspicious sounds, so I find myself thinking that moving to another OS altogether might turn out a good idea after all, besides the fun of learning something new

  • source
  • parent
  • [–] 2 points 2 months ago*

    Project is permissive. Company takes it and distributes binary. Nerds don't use it and look for the og, since the license forces the company to disclose that they just did that in a way or another. The end.

    Project is copyleft. Company takes it and distributes source via GitHub file uploading a zip named after a date or some dumb shit. The original maintainer is now bullied into adapting the code. Sooner or later, the company now has influence over the project. Which is how we ended up with that Debian decision the top post is about, and with completely undocumented drivers right inside of the official Linux tree.

  • source
  • parent
  • [–] 1 point 2 months ago (3 children)

    Is there another GPL OS instead? I am a fan of the GNU Hurd, but sadly I cannot run it on my hardware. The team of devs is really small, and it is amazing what they have done in all these years.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 2 months ago (2 children)

    there is Gloire OS based on the Iron Clad kernel, partially formal proofed written mostly in Ada, their git repositories can be found in Codeberg, there is Genode OS which follows Qt style GPL with caveats, where one corporate entity sells commericial licenses, and holds full copyright through CLA

  • source
  • parent
  • hideshow 2 child comments
  • [–] 79 points 2 months ago

    "AI scrapers break the web, to use this page you'll need JavaScript enabled."

    The ironic...

  • source
  • [–] 17 points 2 months ago (2 children)

    Personally i find debian change of policies to include proprietary firmwares by default worst than this

  • source
  • hideshow 2 child comments
  • [–] 17 points 2 months ago (5 children)

    What's Devuan's position on this? They already forked after the SystemD switch. Here's to hoping they also flip the bird to AI.

  • source
  • hideshow 5 child comments
  • [–] 4 points 2 months ago (2 children)

    I doubt Devuan will stop basing their distro on Debian. Or at least I hope they don't. I specifically use Devuan because it's basically just OG Debian.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 months ago (1 child)

    My main issue is that the packages are really behind though. Even more so than Debian.

    I wish there was a good in-between. Ubuntu was a good sweet spot, but I can't stand how they keep forcing their technology on their users anymore.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 months ago

    Yeah it can be a bit annoying at times. I started out using Debian-based distros before systemd implementation, so Devuan with sysvinit just works for me. I'm not the sort of user who needs the latest updates on anything, so it's mostly fine. I considered checking out Slackware since it also uses sysvinit, but it's in a similar boat with updates and, frankly, I don't want to deal with its package manager lol.

  • source
  • parent
  • [–] 46 points 2 months ago (19 children)

    So Open-Source and FOSS projects collectively decided that they want to jump on half-sunken ship in the middle of the ocean?

    Amazing.

  • source
  • hideshow 19 child comments
  • [–] 9 points 2 months ago* (last edited 2 months ago) (16 children)

    Is it a half sunken ship? I’ve been following AI in software for a while now, even though all signs point to failure and a crash, it just keeps going and people adopt it more.

  • source
  • parent
  • hideshow 16 child comments
  • [–] 8 points 2 months ago* (15 children)

    Hot take: LLMs is the best thing has happened to open source movement:

    • software copyright is defeated and basically eliminated in practice
    • reverse engineering is so accessible that proprietary protocols cannot be hidden and can be reimplemented by AI agents as free software
    • open weight LLMs are incredibly competitive and run on general hardware
    • linux is de facto winner in all computing and rising in desktop and gaming niches

    We're literally in the golden age of free software

  • source
  • parent
  • hideshow 15 child comments
  • [–] 16 points 2 months ago (1 child)

    That would be cool and all, but people stopped reading their code. At work if I can not explain every line of my PR, it will get rejected. I use it as a powerful tool but a lot of people just output code and think their trash belongs in production.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 2 months ago (11 children)

    You're conflating open source and free software with public domain. Open source software licenses are completely dependent on software copyright. This means that if software copyright were eliminated, open source licenses would become completely unenforceable. We may be headed in this direction anyway, but I just thought I would make the point.

  • source
  • parent
  • hideshow 11 child comments
  • [–] 3 points 2 months ago (6 children)

    It has been wild to see Linux users hope that the GPL is rendered unenforceable.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 2 months ago (4 children)

    Why? The entire purpose of GPL is to counteract copyright. If there is no copyright we no longer need GPL either.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 2 months ago* (3 children)

    The GPL gives you the right to access and modify the source code of software you use. A lack of copyrights does not mean that the creators have to share the source code with you. In fact, it means that anyone can take GPL software and turn it into closed source software

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 2 months ago

    Sure but that's mostly irrelevant in practice now. Gpl was notoriously unenforced so this aspect of "getting source code" almost never yielded to much in practice. FSF did a great job with limited resources it has but as code copyright is basically gone now and reverse engineering is so accessible we can actually empower real free software that is fully transparent and verifiable. If you imply that somehow we'll start regressing existing tools to proprietary software I don't see that at all.

  • source
  • parent
  • [–] 1 point 2 months ago (3 children)

    Copyleft exists only because of copyright. If there is no copyright there's no longer a need for copyleft.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 2 months ago (2 children)

    I completely disagree. What's the main thing the GPL does that is different from public domain or the complete absence of copyright?

    It restricts how the code can be used in order to protect the writers and the consumers of the code. Without copyright and copyleft, any company can use any GPL code in any proprietary product they want, without sharing any of their changes and without even crediting the original writers. As an example, Microsoft could adopt the Linux kernel for Windows, heavily modify it, sell it, and stay completely silent about it, without any consequences. That's what a world without copyright means for copyleft.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 months ago (1 child)

    Sure but again this is only a problem if copyright exists. Stallman himself invented GPL due to frustrations of copyright. The permisiveness is default human behavior that was corrupted by evil people and terrible systems. The neutrrance of copyright just returns us to this default state of sharing.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 months ago*

    That's not true at all. Like I said, copyleft relies completely on copyright. It was not at all created in opposition to copyright. It was created in opposition to proprietary (i.e., "unfree") software. Here, from the Wikipedia article on Copyleft (emphasis mine):

    The concept of copyleft was described in Richard Stallman's GNU Manifesto in 1985, where he wrote:[6]

    GNU is not in the public domain. Everyone will be permitted to modify and redistribute GNU, but no distributor will be allowed to restrict its further redistribution. That is to say, proprietary modifications will not be allowed. I want to make sure that all versions of GNU remain free.

    This is impossible to do without copyright existing. Like I mentioned before, without copyright laws, companies can take any code they wish, with any license, and use it in their proprietary software without sharing their modifications.

    Another reference directly from the FSF: "Copyleft is a tool that works within copyright law" (emphasis mine)

  • source
  • parent
  • [–] 2 points 2 months ago

    Llms have been great for finding and fixing bugs and cranking out code, but the systems that allow for generation of code at a direct cost of dollars as opposed to the overhead of managing and employing programmers aren’t under the intense pressure to not redo old work and so are disincentivized from either creating or contributing to open source projects.

  • source
  • parent
  • [–] 65 points 2 months ago (18 children)

    The point isn't so much the quality of the code itself.

    The point is that AI is an inefficient power-wasting piece of trash, and the data centres that power it have significant negative impacts on people and the environment, all for the sake of devs being lazy idiots. And you'd have to be an idiot to let AI take away your skills.

  • source
  • hideshow 18 child comments
  • [–] 51 points 2 months ago (11 children)

    The point is also that this is the pre-enshittification version of AI, and any person or system foolish enough to become dependent on it will get exploited to the best of AI companies' abilities.

  • source
  • parent
  • hideshow 11 child comments
  • [–] 15 points 2 months ago* (last edited 2 months ago) (4 children)

    If only there were some community of people who valued using free and open source software so we had options that were not dependent on the whims of companies. Then we could have software that we could depend on that isn't dependent on the whims of corporations.

    Throwing out AI because there are AI companies who causing harm is like giving up on Operating Systems because of the plethora of bad acts made by Microsoft.

    I agree that everyone should avoid using OpenAI, Anthropic or any of the other companies which were created to spend trillions of dollars buying up all computer hardware on the planet while building fossil fueled datacenters.

    That isn't the same as thinking that the actual machine learning technology itself is somehow inherently bad. There are many open weight models and FOSS projects that lets people use AI without contributing to the capitalist orgy that's causing all of the secondary harms.

    People conflating AI technology and AI companies are failing to diagnose the issue that we're facing.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 6 points 2 months ago*

    Open weight != open source.

    You can can inspect open source software. You can compile the source into binary. You cannot inspect open binary. Well, you can, but it's difficult. Can anyone ever inspect the fucking weights in a useful way? They are just bias numbers.

  • source
  • parent
  • [–] 2 points 2 months ago (4 children)

    pre-enshittification?

    Then what the hell are the models Windows is relying on if this is the GOOD stuff?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 2 months ago* (3 children)

    the opposite of "enshittified" isn't "good." some stuff sucks for fresh, new reasons before it enshittifies and turns to full on exploitative rent-seeking.

    for example, anthropic quietly pulled claude code from their pro subscriptions and made it a separate subscription. that's enshittification. and stupid AI bros are gonna fall for it every time.

  • source
  • parent
  • hideshow 3 child comments
  • [+] -6 points 2 months ago

    Yeah, my laptop is totally going to exploit me. I better not get hooked on using it. I'll just leave it packed up in the box if came in, unplugged from the wall, so it doesn't get a chance. /s

  • source
  • parent
  • [–] 0 points 2 months ago (5 children)

    The point isn't so much the speed and comfort of the commute itself.

    The point is that a car is an inefficient power-wasting piece of trash, and the oil rigs that power it have significant negative impacts on people and the environment, all for the sake of commuters being lazy idiots. And you'd have to be an idiot to let a car take away your mobility.

  • source
  • parent
  • hideshow 5 child comments
  • load more comments
    view more: next β€Ί
    24 comments in c/debian@lemmy.ml view that post