GrapheneOS is currently defending its use of AI coding tools on Mastodon against complaints by various accounts claiming to be users.

We do not understand where you're coming from or why you're so incredibly angry with us. It's not justified and does not make sense.

top 74 comments

sorted by: hot top controversial new old
[–] 37 points 1 month ago (2 children)

There really is a difference between AI-assisted coding and vibe coding, and I don't know enough about actually coding to look at their repos and tell you what's happening.

  • source
  • hideshow 2 child comments
  • [–] 6 points 1 month ago

    The issue is, there's also difference between how people cram "AI-assistance" into their previously well-refined workflows. Did see the odd person ending up with the same issues as straight-out vibe coding but without the speed, including the eventual (mild) AI psychosis and later switching to vibe coding after the chatbot convincing him.

    Also I think it would be pretty trivial to generate an "understanding" of the code, yet AI boosters never bring up it as a concern.

  • source
  • parent
  • [–] 31 points 1 month ago (12 children)

    A bit unrelated, but I wonder if I'm the only one left that is:

    • Using small, open-weight models
    • Asking it to only write small snippets that I can easily go through, check and understand.
    • Copying pasting from good old web frontends instead of integrating it into my editor or whatever else people do with agents nowadays.

    I feel like when we're talking about AI this sort of usage gets lumped into the same pile as agentic vibe coding and it's not helpful for discussion. Surely most people wouldn't find this problematic?

  • source
  • hideshow 12 child comments
  • [–] 11 points 1 month ago (6 children)

    Probably.

    My company is currently pushing "loop engineering" on us... They are in love with Claude and keeps referring to it as "him". Very proudly announce that "I set ut a loop, and he closed 40 PRs while I slept!" (without review, of course). Based on vibe written tickets as well, which contains many hallucinations.

    The poor QA department (2 people) is now trying to figure out how to test all the slop.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 4 points 1 month ago (3 children)

    The poor QA department (2 people) is now trying to figure out how to test all the slop.

    I'd hand in my resignation...

  • source
  • parent
  • hideshow 3 child comments
  • [–] 9 points 1 month ago

    I prefer it less for the writing part (unless big refactors that aren't actually complex) and more for analysis. If you got a couple million lines of code upstream that you depend on heavily (ERP modules) then it's nice to fire off a prompt and come back to "you got weird behavior x because upstream changed y, here's the exact file and lines and how it flows there"

  • source
  • parent
  • [–] 7 points 1 month ago

    No, there are plenty on the left doing exactly that. Plenty don't mention it because there's been so much AI pushback they don't want to be written off, others don't mention it because they know it doesn't really contribute to the conversation most times. It's unlikely that your use is reflective of most AI use in these large projects.

    Realistically, even your use doesn't address some people's issues. People dislike that the training data was used without consent, that's not really addressed by open weight models. You checking and understanding the output is great, but a lot of people take issue with having offloaded that to the AI in the first place. Maybe your use doesn't have the same negative environmental impact as some of the other models, but I'm not sure it really matters. If we're using AI then inevitably some outputs will have larger environmental impact than others.

    I am not saying your AI use is the problem with humanity or anything, but no, you're not alone. Most people just aren't talking about people like you and your specific situation doesn't actually fully address people's issues with AI regardless.

  • source
  • parent
  • [–] 5 points 1 month ago

    I have occasionally used anonymous browser sessions in the way you describe, and I still feel dirty for it and think it's problematic. It did not affect the quality of my code because I never did the 2nd bullet, I never asked for drop-in code or used any, but the ethical implications suck donkeyballs so I hate that I do this occasionally - I blame really bad documentation of some build environments.

  • source
  • parent
  • [–] 64 points 1 month ago (11 children)

    If they're just using it to find and patch bugs/exploits? Fine by me.

    Vibe coding? Get the fuck outta here.

  • source
  • hideshow 11 child comments
  • [–] 37 points 1 month ago* (6 children)

    This is the key point.

    From my reading that is not the limit in how they are using AI. It seems like they are accepting LLM generated code as inputs.

    This pretty much compromises the whole project as far as I am concerned.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 17 points 1 month ago* (last edited 1 month ago) (3 children)

    Considering Graphene's entire reputation is staked on extremely precise definitions of security, this is a little concerning.

    They're the "best" (read: most secure) mobile operating system. If the best degrades, I don't foresee some Graphene alternative stepping up very quickly (see also: cross-platform alternatives to Google-made Chromium and Google-funded Gecko)

  • source
  • parent
  • hideshow 3 child comments
  • [–] 7 points 1 month ago* (2 children)

    is the linux kernel "the best"? because they are using AI tooling. Linus actually threatened to use LLM to maintain sparse if nobody stepped up..

    is curl the best? because the creator of curl has also used/accepted LLM code...

    if the creators of two of "the best" pieces of software ever made are accepting (NOT embracing or promoting... just accepting) LLM code.... maybe it's time for us to think about the possibility that this MIGHT be a useful tool instead of everyone just yelling "SLOP SLOP SLOP" everywhere.......

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 1 month ago

    People trusted Linux to be better than Microsoft Windows, and saw the effect of a company with tons of money and first-class AI access exponentially worsening their product.

    It has been disappointing to see people like Linus Torvalds turn aggressive against people who do not agree with his ideology, and I find it distasteful for you to use reductive attacks against strawmen as well.

  • source
  • parent
  • [–] 5 points 1 month ago

    Someone commented on here the other day that they don't use anything that uses AI. I had to point out that they were on Lemmy, in a contemporary web browser, connecting to a Linux server running inside of a docker container. I'm still not sure if they understood my point, but I'm glad someone else on here is seeing the ripple effect.

  • source
  • parent
  • [–] 8 points 1 month ago

    Based on my understanding, the "core" team uses AI to detect vulnerabilities.

    They also take codes from paid third party devs, and they say they don't mind how they wrote the code, but it must be clear and each contributor needs to be able to explain it.

    They follow the same rules on code conventions including readability. So basically, it's less that they accept it than they don't care as long as it matches their quality expectations. If you can't tell, you can't ban...

  • source
  • parent
  • [–] 4 points 1 month ago (3 children)

    If Vibe coding means people who don't know how to code creating code... yeah, that's kind of like giving people who don't know how to paint an airless gun and 5 gallon bucket and telling 'em to go for it on this building here...

  • source
  • parent
  • hideshow 3 child comments
  • [–] 8 points 1 month ago* (2 children)

    Even people who can code tend get worse over time the more and more they rely on "AI" to avoid having to think too hard.

    Studies have shown doctors who rely heavily on "AI" are similarly affected.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 1 month ago

    People who rely too heavily on anything get brain atrophy with net negative consequence.

    Those same tools can be used for learning and exploration and strengthening skills - all a matter of how they're used.

  • source
  • parent
  • [–] -1 points 1 month ago

    People using calculators stop being able to calculate things and don't even get me started in these evil "abacus" things that strip people off their short term memory! People using cheap paper to write whatever they want will not only have worse calligraphy but also write about whatever comes to their mind! Etc. etc. history is full of this.

  • source
  • parent
  • [–] 56 points 1 month ago* (9 children)

    I'm anti-WhateverTheBillonairesArePushing. And by golly are they pushing AI.

  • source
  • hideshow 9 child comments
  • [–] 47 points 1 month ago*

    GrapheneOS is using AI models to find vulnerabilities before others do. The Bitcoin Red Team did the same and found an absolute ton.

    I hate the AI bubble, but they're forced to use AI to defend against AI.

  • source
  • parent
  • [–] [S] 1 point 1 month ago (5 children)

    You shouldn't let billionaires control your life. They may not have your best interests at heart.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 18 points 1 month ago (4 children)
  • [–] 4 points 1 month ago (3 children)

    Yea, but by refusing to use anything pushed by billionaires you technically give them control. They can just start pushing anything and you would stop using it

  • source
  • parent
  • hideshow 3 child comments
  • [–] 11 points 1 month ago (2 children)

    Using tech that billionaires push makes them richer and gives them control.

    Tell me how does not using their crap give them control, exactly?

  • source
  • parent
  • hideshow 2 child comments
  • [–] -1 points 1 month ago (1 child)

    It’s more of stupid technically. If a billionaire randomly decides that they want to push sliced bread really hard would you stop buying sliced bread? If so then the billionaire technically has some control over you, because they caused you to stop buying sliced bread

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 1 month ago*

    I mean, see where you're going there. Bread may be a bad example because I can get sliced bread from a local or regional producer that is more conscientious. If any billionaire is pushing me to buy sliced bread its going to be some mass produced crap like Dempsters that I would never buy anyway because I do not support corporate food where I can avoid it as I've lived through enough mini crises in the last 30 years to have learned the hard way that when things get tough, its the local and regional creators that keep things on the shelf.

    AI however, is only good in the older forms where models were made to do one thing and do it well with reasonable levels of compute. Those were sustanable. LLMs, no matter where you run them, cost disgusting amounts of compute to train and no matter how well you train them will only evey have a statistical chance of being right, and they will never have 100% accuracy without throwing even more power at them.

    And, LLMs will never reach AGI. If we want something that really mimics humans, then what we need are many tiny, efficiently trained models for specific tasks with high accuracy, and then interface between all those skills with a very accurate task comprehension model, and then maybe we will get to AGI, because this is basically how humans work.

    I still maintain that LLMs are the wrong tech, at the wrong time, and the only thing their proliferation is being pushed for is their questionable capability to enable ths surveillance state we were warned against for the last 40-50 years in scifi. And the CEOs want this because people are getting more and more fwd up with their shit.

    All LLMs will bring the world is misery. There is no acceptable use for them and I am sticking to that line in every product decision these days. They were built on the backs of free content that the world created and a ton of copyrighted work that was just blatantly stolen.

  • source
  • parent
  • [–] 15 points 1 month ago (8 children)

    Reading the comments, wow AI is polarizing. Neither side will budge.

    I guess only time will tell, to see if all the AI code will actually come crashing down.

  • source
  • hideshow 8 child comments
  • [–] 14 points 1 month ago (7 children)

    Non AI code has been crashing down for decades, controlled chaos, continuous improvement. We have lots of tools to put metrics on that, and AI assisted code is fairly well crushing those metrics. It's not 100% self sufficient code creation Nirvana, but it might be fairly compared to the Cotton Gin in terms of making the field workers more productive in the delivery of market ready code/cotton.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 18 points 1 month ago* (last edited 1 month ago) (3 children)

    Non AI code has been crashing down for decades,

    i.e. the code that made literally everything until a few years ago? That was crashing?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 16 points 1 month ago (1 child)

    but it might be fairly compared to the Cotton Gin in terms of making the field workers more productive in the delivery of market ready code/cotton.

    Last i heard was that developers FELT like it made them more productive but actually not so much.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 1 month ago

    Last i heard was that developers FELT

    Several of those studies were published on early 2025 data, LLM agents have been rapidly improving since then. In early 2025 I would agree with the sentiment - it was kind of equivocal for overall productiveness. By early 2026 I'd say it was a much clearer advantage, both in doing the same kind of work faster, but more importantly: in doing better work at the same speed or even a little faster.

  • source
  • parent
  • [–] 111 points 1 month ago (22 children)

    I haven't dug into the code, but blanket hate for AI in code is extremely frustrating. There's a difference between vibe coding and the hundred other ways to "use AI" on a project.

  • source
  • hideshow 22 child comments
  • [–] 17 points 1 month ago* (4 children)

    I understand this but, you have to consider the ecological impact of it, the thousands or more people whose work was stealed to train AI, the constant shoving of AI into everything and the problems that have arise from it, the campain AI companies did and do telling people they are going to lose their jobs and constant fearmongering, the constant blatantly lying of "AGI achieved", the layoffs by senile CEOs, the debt that is causing because stupid people in power gonna be stupid, etc. There are plenty of reasons to hate AI and what it is doing to our world and people lives in general. Sure there are positives but the negatives clearly outweighs the positives.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 1 month ago (3 children)

    On top of that, regardless of however you feel about AI, there are so many questions about copyright and ownership here, that as-of-yet remain untried and unanswered by the courts, that it's essentially impossible to know what the legal ramifications will turn out to be, when accepting "AI code" in your project. I definitely fear that it could turn out to be a sort of trojan horse against especially the GPL, and other copyleft licenses. I conaider it to be risky to use AI code, on that basis alone.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 1 month ago (1 child)

    True, but how will you prove that code was written by AI and not yourself? Any people can generate code, modify some variables to incorporate in their code, and it won't be any different than copying it from stackoverflow. Unless the code is written in a "very specific AI way" it won't be possible to distinguish.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 month ago

    Oh, I don't think any court would rule that using LLM generated code automatically infringes on the copyright of everyone whose text was used to train it, independently of the degree of similarity between the generated output and the original text(s).

    But LLMs have a habit of sometime, and not too infrequently either, reproducing parts of their training material verbatim, as their output. As long as it's only sufficiently small "snippets" of text or code, it's unlikely to raise significant copyright concerns - but the fact is that it's not actually that rare that an LLM will replicate larger sections of text from its training material, spanning across many lines. What's more, LLMs don't advise you of this, when their output is a replica of a significant part of an already-existing, copyrighted text. But you'll be infringing on somebody's copyright, whether you know it or not, irregardless of whether you aquired the text from an LLM or elsewise. That's a big liability to accept in a large project, that frequently uses LLM-generated code. It would be a minefield.

  • source
  • parent
  • [–] 1 point 1 month ago

    I'd hope that they will stick to non-retroactivity for new laws and rulings on AI, or else the world will have a giant mess on its hands. But I have the feeling that we're moving towards an eventual, enduring weakening of copyright law, which is totally fine by me. Copyright has done more harm than good to the world (imo).

  • source
  • parent
  • [–] 8 points 1 month ago (1 child)

    Usually, if it's noticeable that AI was used on code, the code is flawed or, at least, has copyright concerns.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 1 month ago

    Agreed.

    I strongly remember a CompSci professor ~2005 being disgusted with auto-generated Java GUI. And yes it was clunky and more memory intensive than it could have been, but also, I really don't care about how GridView is defined most of the time.

    Bad code is bad code, touched by AI or not. For working code, a volunteer group spending resources to determine if it might have been touched by AI is at the very least an incredibly frustrating standard to try to meet. And very likely impossible to verify in any meaningful way.

  • source
  • parent
  • [–] 34 points 1 month ago (10 children)

    It's funny because anyone seeing this as black and white clearly hasn't ever opened an IDE.

  • source
  • parent
  • hideshow 10 child comments
  • [–] 69 points 1 month ago* (last edited 1 month ago) (9 children)

    I've been a programmer for two thirds of my life up to this point. I don't see how the machine that generates code that must be assumed to be broken, and statements about said code that must be assumed to be wrong, until both have been manually verified, because the "hallucination" issue is inherent to the design of LLMs and cannot be solved, is supposed to make my life easier. Especially since a well known problem in computer science is that writing code is more fun than reading it.

    If you're using AI for code generation, I hope you like reading code.

    If you're using AI to learn your way around an existing codebase, I hope you're prepared to fact check everything it tells you.

    If you're using AI for code review before merging a PR, fucking yikes. What made you think the sycophant machine that once told users a soggy cereal bar was a great business opportunity and cannot even transcribe McDonald's orders correctly was suitable for that purpose?

    If you're telling yourself it's okay because there's a human in the loop, please read some studies about attention fatigue and consider that increasing the number of critical decisions a person must make per day, while giving them a suggested answer that's right 90% of the time and catastrophically wrong the remaining 10%, and the only way to tell the difference is to read in depth, might not have the desired effect. Especially if the human in question is then put under time pressure.

    And all that is before I go on a five paragraph rant about the ethical transgressions of every major AI company.

    It's pretty black and white for me.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 6 points 1 month ago

    I don’t see how the machine that generates code that must be assumed to be broken, and statements about said code that must be assumed to be wrong, until both have been manually verified, because the “hallucination” issue is inherent to the design of LLMs and cannot be solved, is supposed to make my life easier. Especially since a well known problem in computer science is that writing code is more fun than reading it.

    quoted for emphasis. you have more patience than I do in telling sycophants why their take is idiotic.

  • source
  • parent
  • [–] 2 points 1 month ago* (last edited 1 month ago) (5 children)

    The fact that it isn't perfect is the grey. And sure, it has a lot of problems but not only is it still useful anyways, but those problems are being ironed out. They probably won't disappear completely but the tech is already miles further than what we had 2 years ago.

    To make you understand what I mean by black and white, you have a user that put "AI is evil" in big bold letters in the comments. The hate is almost cult like for part of the population, and imo, it's mostly because the media tells them to be mad.

    Most of it depends on the task in any case. I don't work with massive code bases and it doesn't take long reading through a few scripts, running it and checking the output. The people I know that do work with huge code bases are using it as well, but I can't really talk for them either. They don't hate it tho.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 29 points 1 month ago* (last edited 1 month ago) (1 child)

    The person who put "AI is evil" in big block letters is objectively correct. See homes getting claimed under eminent domain to build power lines for datacenters, electricity prices for consumers rising as service quality gets worse, and water usage to the tune of millions of gallons per datacenter per day. See companies buying rare books in bulk, cutting them apart so they can be scanned faster, and not publishing the scans, literally destroying culture so they can have one more scrap of training data guaranteed to be free of slop that their competitors don't have. See companies operating web scrapers that deliberately evade every block that website owners try to use to stop them from reading their sites, and then scraping so many different pages so frequently that it's indistinguishable from a DDoS attack, hosting bills skyrocket, servers crash, indie webmasters pay the price for corporate greed. See xAI operating natural gas turbines on the property of their datacenter for extra electricity in flagrant violation of the Clean Air Act, spewing toxic smoke into the air and generating powerful, inaudible infrasound vibrations that have been linked to everything from nausea to irritability to hearing loss to seizures. See Anthropic treating Minority Report as an instruction manual. See how ChatGPT use affects test scores. See AI psychosis. See chatbot-induced suicides. See deskilling. See how little AI companies care.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (-1 replies)
  • [+] 11 points 1 month ago* (last edited 1 month ago) (3 children)
  • [–] -2 points 1 month ago* (last edited 1 month ago) (2 children)

    Sorry, I don't bootlick the copyright machine. Anyone with half a brain can see it's transformative. I don't get why collage is fine but AI isn't, it's just copyright mega corps and data brokers that smell blood in the water. All the data isn't even owned by the artist, you are fighting for universal records, not your local guitarist.

    For the climate aspect, it's mostly grid issues and corruption. It's laughable to blame AI when we have president pedo prostrating himself in front of oil companies and destroying renewable projects. We need regulations and all that on where they can be placed and how they get powered, but in the end, it's just software. I could use AI 8 hours a day for my whole life and I still wouldn't be close to the damage one ticket to Europe does. It's a scape goat being served by a corrupt pro oil lobby.

    Don't get me wrong, I know what datacenters entail with the amount of people they serve, but if you look at it at an individual level, it's a drop in the bucket, or it would be if they weren't using plane turbines. We need regulations to curb the stupidity, but it's doesn't make it all inherently bad.

  • source
  • parent
  • hideshow 2 child comments
  • [+] 13 points 1 month ago* (last edited 1 month ago) (2 children)
  • [–] -3 points 1 month ago (1 child)

    I don't think the copyright thing is an issue.

    Climate wise, it's only an issue because of a corrupt administration, it's not a death blow to it. It's at the heart of it overblown by a reasonable measure imo.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (-1 replies)
  • load more comments (-1 replies)
  • load more comments (-1 replies)
  • load more comments
    view more: next ›
    28 comments in c/fuck_ai@lemmy.world view that post