How a hidden prompt injection in CONTRIBUTING.md revealed that 40% of pull requests to a popular GitHub repository were generated by AI bots

all 11 comments

sorted by: hot top controversial new old
[–] 27 points 7 months ago (2 children)

What is MCP?
MCP is an open protocol that enables AI models to securely interact with local and remote resources through standardized server implementations.

Is this a different definition of AI than the slopbots we all know and love, or is this a case of poetic irony?

  • source
  • hideshow 2 child comments
  • [–] 30 points 7 months ago

    MCP is for tool calling, the stochastic parrot matches something, say 133 x 8 / 7 as a math problem and instead of guessing wrong calls a calculator using good old deterministic code and gets a correct answer.

  • source
  • parent
  • [–] 26 points 7 months ago (2 children)

    can I make them do extra work that would make their contributions genuinely valuable?

    The worst-case scenario for this is that you make them do extra work that isn't genuinely valuable, and it wastes their lazy devs' tokens.

  • source
  • hideshow 2 child comments
  • [–] 23 points 7 months ago (1 child)

    So this person prompt injected to figure out which submissions were bots, found out, and instead of taking a firm stance against this practice they're gonna... try and "make use" of all the bot submissions... sighhhhh oh my fucking God how many more times am I going to see these similar brain dead arguments? I can't take it anymore.

  • source
  • hideshow 1 child comment
  • [–] 6 points 7 months ago

    This might be the most ironic thing I've ever read...

  • source
  • [–] 6 points 7 months ago

    Unless we figure out how to evolve our processes – which includes being able to recognize and distinguish bot contributions – open-source maintenance is going to grind to a halt.

    I wish there was some sort of "trust network" where actual humans can say, "Yes, I know this contributor IRL, and vouch for them." But that's also a security problem. So, 🤷🏼

  • source
  • [–] 1 point 7 months ago

    So, this guy maintains a repo that is 100% exclusively targeting ai bros (MCP servers), then does a shocked Pikachu face when the ai bros use ai bots to contribute to the ai slop??

  • source
  • 80 comments in c/selfhosted@lemmy.world view that post
    16 comments in c/opensource@lemmy.world view that post