7 ms·

Now they want to kill the Linux kernel. :( We've already seen how bug bounty projects were closed by AI spam; I think it was curl? Or some other project I don'

Now they want to kill the Linux kernel. :( We've already seen how bug bounty projects were closed by AI spam; I think it was curl? Or some other project I don't remember right now. I think AI tools should be required, by law, to verify that what they report is actually a true bug rather than some hypothetical, hallucinated context-dependent not-quite-a-real-bug bug.

tonfa 7mo ago
It's not forced upon anyone, it's a tool that patch authors or reviewers can use if they want to.
KurSix 7mo ago
Those incidents with curl and sqlite were caused by a mob of script kiddies dumping source code into ChatGPT and spamming bug bounties for quick cash. This tool is built by actual Google devs who are active on the kernel mailing list. They know perfectly well that if they start spamming LKML with hallucinations, they'll get patch acceptance blocked for their entire corporation