3 ms·
> Essentially, a careless developer with access to an LLM can now perform a cheap DoS on reviewers. Exactly. And not just a careless developer, but one intenti
by imiric 1y ago
> Essentially, a careless developer with access to an LLM can now perform a cheap DoS on reviewers.
Exactly. And not just a careless developer, but one intentionally doing so.
Recently [this project][1] made it to the front page and amassed quite a few upvotes, positive feedback, and GitHub stars. Yet anyone giving it a cursory look would be able to tell that it's AI-generated slop, that is completely unnecessary at best, and possible malware at worst.
Not only that, but the author[2] fired off several AI slop PRs to popular projects in a single day (May 12th), which is exactly the cheap DoS you mention. The author of cURL wrote about AI-generated bogus security reports last year[3], and the work they add to open source maintainers who are already stretched thin. So this is a real problem that most AI proponents are ignoring.
[1]: https://news.ycombinator.com/item?id=44009321 https://news.ycombinator.com/item?id=44009321
[2]: https://github.com/dipampaul17 https://github.com/dipampaul17
[3]: https://daniel.haxx.se/blog/2024/01/02/the-i-in-llm-stands-for-intelligence/ https://daniel.haxx.se/blog/2024/01/02/the-i-in-llm-stands-f...