2 ms·

> No, AI assistance is NOT welcome in general. Can you cite that? I see them specifically welcoming AI security reports; I don't see any evidence that other AI

by akerl_ 2mo ago

> No, AI assistance is NOT welcome in general. Can you cite that? I see them specifically welcoming AI security reports; I don't see any evidence that other AI submissions are not welcome.

as12qh 2mo ago
The AI boosters should look for evidence that they do allow AI contributions! Why would they mention in the release notes that AI security bug reports are welcome if they allowed AI in general anyway?
asveikau 2mo ago
These policies seem to be often evolving lately in many projects, but I believe OpenBSD (the project OpenSSH is contained inside) is currently skeptical of AI generated code contributions at this point in time. For example, I found this on a Google search, here is a thread from Theo, the project leader, about LLM output and copyright, where he says they can't accept it into the tree on copyright grounds. https://marc.info/?l=openbsd-tech&m=177425035627562&w=2 https://marc.info/?l=openbsd-tech&m=177425035627562&w=2 Elsewhere in the thread he implies using it for a code review tool is ok
- minimaltom 2mo ago
  Idk if its accurate to rote project the policies of OpenBSD to OpenSSH, yes technically its a subproject but in practice stewardship and thus effective policy is pretty much all damien.
  - deleted 2mo ago
    [deleted]
  - asveikau 2mo ago
    If they disagreed about something so fundamental as the attribution of copyright, it would be a serious schism, from my outside perspective it seems along the lines of something that would lead to a fork or separation between the projects. I also just read more context on the thread and it seems like Damien Miller is in there saying much the same thing as Theo. He wrote: > ... use of AI-written code now [will] expose us to legal risk.
    - djmdjm 2mo ago
      This was in the context of a contribution to add (IIRC) ext4 filesystem support to OpenBSD. In this case, I was worried that the AI was just regurgitating code that was in its training corpus because how many ext4 implementations are there? I think AI generated bugfixes and smaller features that don't duplicate fairly unique pieces of work in other projects are much less problematic from a copyright perspective at least.

by akerl_ 2mo ago

> No, AI assistance is NOT welcome in general. Can you cite that? I see them specifically welcoming AI security reports; I don't see any evidence that other AI submissions are not welcome.

as12qh 2mo ago

The AI boosters should look for evidence that they do allow AI contributions! Why would they mention in the release notes that AI security bug reports are welcome if they allowed AI in general anyway?

asveikau 2mo ago

These policies seem to be often evolving lately in many projects, but I believe OpenBSD (the project OpenSSH is contained inside) is currently skeptical of AI generated code contributions at this point in time. For example, I found this on a Google search, here is a thread from Theo, the project leader, about LLM output and copyright, where he says they can't accept it into the tree on copyright grounds. https://marc.info/?l=openbsd-tech&m=177425035627562&w=2 https://marc.info/?l=openbsd-tech&m=177425035627562&w=2 Elsewhere in the thread he implies using it for a code review tool is ok

minimaltom 2mo ago
Idk if its accurate to rote project the policies of OpenBSD to OpenSSH, yes technically its a subproject but in practice stewardship and thus effective policy is pretty much all damien.
- deleted 2mo ago
  [deleted]
- asveikau 2mo ago
  If they disagreed about something so fundamental as the attribution of copyright, it would be a serious schism, from my outside perspective it seems along the lines of something that would lead to a fork or separation between the projects. I also just read more context on the thread and it seems like Damien Miller is in there saying much the same thing as Theo. He wrote: > ... use of AI-written code now [will] expose us to legal risk.
  - djmdjm 2mo ago
    This was in the context of a contribution to add (IIRC) ext4 filesystem support to OpenBSD. In this case, I was worried that the AI was just regurgitating code that was in its training corpus because how many ext4 implementations are there? I think AI generated bugfixes and smaller features that don't duplicate fairly unique pieces of work in other projects are much less problematic from a copyright perspective at least.