101
Flathub moves to ban nearly all apps and submissions made with generative AI (www.gamingonlinux.com)
submitted 5 months ago by to c/news@lemmy.linuxuserspace.show
10 comments fedilink hide all child comments

all 10 comments

sorted by: hot top controversial new old
[–] 9 points 5 months ago

That’s some good news.

  • permalink
  • fedilink
  • source
    •
    [+] -16 points 5 months ago* (8 children)

    Maybe if they took security even remotely seriously and made a functioning sandbox (that apps can't trivially opt themselves out of), we wouldn't have to care whether an app was AI generated or not.

    Yes, containers/sandboxes have vulnerabilities that really clever attackers can exploit, but AI generated slop can't.

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 8 points 5 months ago

    Speaking broadly: Plenty of other issues or security vulnerabilities can exist that a good sandbox won't catch. Like software can insecurely store and transmit passwords, have bad randomness for something security sensitive, secretly be mining crypto behind the scenes and burn through battery/electricity, etc.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 5 months ago (5 children)

    Yes, containers/sandboxes have vulnerabilities that really clever attackers can exploit, but AI generated slop can't.

    Wait are you suggesting that AI slop code can't have vulnerabilities? Cause... that's hilariously not even remotely true. It's a huge issue in SecOps, it was even an issue in the past when humans didn't have a "easy" button and every vibe coder dumped commits. It's way worse now because a lot of the vibe coded shit isn't checked, and the people who produce it have no clue what the fuck it does in the first place.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 5 points 5 months ago (4 children)

    Wait are you suggesting that AI slop code can't have vulnerabilities?

    I think they mean "containers can have security vulnerabilities, but you need to be cleaver to exploit them, AI slop is not clever enough to exploit those vulnerabilities"

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
    • 8 comments in c/gaming@lemmy.zip view that post
    [–] 31 points 5 months ago

    Honestly not an insane stance for an app repository. LLMs puke out what they ate, and there's a perfectly reasonable concern that they might not have legal authorization to everything they trained on. I definitely wouldn't want to get sued for hosting an app that is found to be in violation of a license agreement.

  • permalink
  • fedilink
  • source
    •
    [–] 42 points 5 months ago

    Hallelujah

  • permalink
  • fedilink
  • source
    •
    [–] 26 points 5 months ago (1 child)

    Fair. Maybe a separate repo makes sense for the wild West of vibe apps, but flathub is really more focused on end users whom will absolutely commit a murder if they find out the documentation they have been using and failing to do what they want was just gas lighting them.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 0 points 5 months ago* (2 children)

    Why do they accept proprietary apps, but no ai assisted ones.... I don't get it...

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 5 points 5 months ago* (1 child)

    I guess even though you can't tell if propriety code has AI code in it, it goes along with

    there is an exception noted for "mature, well-maintained projects" but it's not a guarantee.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 5 months ago

    However, this could also be left up to the user by labeling the applications accordingly, as is the case with proprietary applications. When it comes to quality, I’d say: you can produce poor-quality code even without AI, but it’s a lot more work 😀️

  • permalink
  • fedilink
  • source
  • parent