this post was submitted on 07 May 2025
430 points (99.8% liked)

Linux

7276 readers
308 users here now

A community for everything relating to the GNU/Linux operating system

Also check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev
430
Open source project curl is sick of users submitting “AI slop” vulnerabilities (arstechnica.com)
submitted 4 days ago by cm0002@lemmy.world to c/linux@programming.dev
48 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] DmMacniel@feddit.org 82 points 4 days ago* (last edited 4 days ago) (2 children)

Those who use AI to report to open source projects and flood the volunteering devs who keep the World going, should be disqualified from using those open source projects to begin with (even though thats not feasible)

[–] teawrecks@sopuli.xyz 23 points 4 days ago

Consider that it's not intended to be helpful, but actually could be a malicious DDOS attempt. If it slows down devs from fixing real vulnerabilities, then it empowers those holding zero days for a widely used package (like curl).

[–] dgriffith@aussie.zone 16 points 4 days ago (1 children)

Those who use AI to report to open source projects and flood the volunteering devs who keep the World going, should be disqualified from using those open source projects

I propose a GPL-noAI licence with this clause inserted.

[–] Swedneck@discuss.tchncs.de 8 points 4 days ago (1 children)

so not GPL at all, then

[–] dgriffith@aussie.zone 5 points 3 days ago (1 children)

Public with conditions on behaviour which can lead to your licence being revoked, just like the current GPL. 🤷‍♂️

[–] Kissaki@programming.dev 3 points 3 days ago* (last edited 3 days ago)

The license doesn't get revoked. It does not apply to things it does not allow in the first place.

Some kind of restrictions are easier to describe and assess than others.

I doubt someone that generates AI slob reports would care about the restrictions anyway.