4 ms·

AI Is Spamming Open Source Repos with Fake Issues

• cratermoon 2y ago
  A related problem has hammered the National Vulnerability Database and similar repos with CVEs, as far back as 2023: https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/ https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-eve...
• robrtsql 2y ago
  It's like Hacktober (where a few YouTube assholes showed a bunch of non-developers how to waste maintainer's time with bogus PRs in order to get free stuff from DigitalOcean) except substantially worse because these issues take longer to dismiss. Horrible.
  • cratermoon 2y ago
    Also, there are (or were) organizations that give their programmers incentives for finding and filing CVEs. Naturally that's lead to lots of low-quality CVEs, and with AI and other automated tools it's become easy for low-information programmers to generate reports on code they have zero understanding of.
• Lockal 2y ago
  Examples: https://github.com/apache/airflow/issues?q=is%3Aissue%20state%3Aclosed%20label%3A%22AI%20Spam%22 https://github.com/apache/airflow/issues?q=is%3Aissue%20stat... Other than the content (which indeed makes no sense), these usually can be recognized by subjective adjectives and polish language[1]. [1] https://news.ycombinator.com/item?id=42864854 https://news.ycombinator.com/item?id=42864854