4 ms·
Isn't there some alternative approach? I.e when someone submit ai slop they get a strike. Three strikes and you are suspended from submitting to the bug bounty
by k2xl 5mo ago
Isn't there some alternative approach? I.e when someone submit ai slop they get a strike. Three strikes and you are suspended from submitting to the bug bounty for x months/years?
*Edit - I get it. It seems like the authentication is a challenge.
- moron4hire 5mo agoThey mentioned they had identified alternatives but it would be costly to implement them. One can imagine that ban evading by generating a new user account would be easy for an LLM agent. It's going to be a long, long game if whack-a-mole.
- vrighter 5mo agoyou still need to spend effort reviewing the code to figure out when you can give a strike. Thrice for an actual ban. This would still waste precious maintainer time.
- JoshTriplett 5mo agohttps://en.wikipedia.org/wiki/Sybil_attack https://en.wikipedia.org/wiki/Sybil_attack New identities are cheap.
- icoder 5mo agoI think that's the problem, or at least a problem, and a growing one.
- blharr 5mo agoSuch a person can just make a new account and go back at it
- empath75 5mo agoThis probably gets solved outside of the level of an individual project. No small team can handle this without building a whole product just to handle the bug bounty.
- mapt 5mo agoHow about "It costs $1000 to submit a bug bounty for approval", and raise the reward to $2000 (or $5000 if it's in the cards, since that will have a deterrant impact on non-AI responses). Denominated in BTC to avoid chargebacks etc.
- JoshTriplett 5mo agoI think that's entirely sensible. Doesn't even have to be that expensive, just expensive enough to deter people who go "oooh, free money", and expensive enough to compensate for having to review slop far enough to realize it's slop.
- icoder 5mo agoWouldn't be surprised if a dollar per entry already made a whole lot of difference.