an entire presentation at DEFCON appears to just be straight up AI slop: https://www.openwall.com/lists/oss-security/2025/09/25/1'nwhen will it end?

[ariadne@social.treehouse.systems]

an entire presentation at DEFCON appears to just be straight up AI slop: https://www.openwall.com/lists/oss-security/2025/09/25/1

when will it end?

[ariadne@social.treehouse.systems]

what I will say is: you want to use an AI tool to help you prepare an MR or an issue report or whatever? that’s YOUR decision. i’m not the boss of you: you do you.

BUT: it is on YOU to make sure that AI tool is producing good output. if YOU waste my time by making me chase down convincing but ultimately bullshit output from your tool, then YOU will be banned from my projects.

it is as simple as that.

[androcat@toot.cat]

@ariadne
Easier to just ban all AI enthusiasts, surely?

LLMs will never track truth. That isn't what they were built do do, and it is not something they can ever learn.

They are bullshit engines.

[ariadne@social.treehouse.systems]

@androcat please explain how one might preemptively ban all AI enthusiasts

[ariadne@social.treehouse.systems]

@androcat you are going to reply with something about CoCs, no doubt.

so i am going to preemptively cut it off: i can put whatever i want in CoC for example, sure. but the reality is:

- most people don’t actually read it, and
- bad actors will ignore it anyway

which brings us back to the beginning where i am manually banning bad actors for doing bad work.

and at that point it doesn’t change anything from what i’ve already said.

but it feels good, right?

[ariadne@social.treehouse.systems]

@androcat at the end of the day, what matters *to me* is whether work submitted to me for review is accurate or not. it is my job as maintainer to judge the accuracy.

how the work was created is not the part that is interesting to me, but instead its accuracy. if someone uses an LLM to workshop something, and they test it, they verify it is correct, and they are prepared to effectively defend it in review, then it does not really matter to me, because it still checks the boxes.

the problem isn’t the LLM, it’s the lack of care in generating the work. this is why we call it “workslop”. LLM abuse is just the latest generation of workslop production, automated code scanning is another type of workslop. fuzzing without appropriate context is another type of workslop. these don’t involve LLMs at all.

[adriano@lile.cl]

@ariadne @androcat "The problem is not artificial intelligence but natural dumbassery"

[ariadne@social.treehouse.systems]

@adriano @androcat precisely. LLM abuse is just the latest example of the fundamental social problem of people bullshitting their way through life.

[androcat@toot.cat]

@ariadne

I can sense the exasperation behind your words. You have my admiration for your patience.

But yeah, I didn't really think it through, that people who would stoop so low as to submit slop would somehow respect a request to direct their "efforts" elsewhere.

@adriano

[ariadne@social.treehouse.systems]

@androcat @adriano we literally live in a time where people submit automated code scanning results, that they have signed off on and assigned CVEs to, that are just total bullshit. in fact a large minority of CVEs, if not majority at this point, are sadly this.

we live in a time where people have their *unsupervised* LLM agents are submitting bugs to public mailing lists offering a 30 day embargo on their non-bug.

the problem isn’t the LLM, it’s the person who lets it go do its thing without supervision, without quality assurance. this is why i focus on the person, not the specific method with which they are annoying.

[lamanche@techhub.social]

I suggest to you that people bullshitting their way through life is encouraged by 1) bro culture and 2) late stage capitalism
Actual skill and pride in one's work requires a certain baseline of safety and security
@ariadne @adriano @androcat

[adriano@lile.cl]

@lamanche Not that this is false, but it's generalizing a specific problem without actually doing much. People have been bullshitting their way through life for ages, encouraged etc.

This particular thing of submitting security vuln reports or bug reports without even checking them is new and specific.

@ariadne @androcat

[ariadne@social.treehouse.systems]

@adriano @lamanche @androcat yes, i would say the social problem dates way before capitalism. in fact, history proves this.

and, blaming all problems on “late stage capitalism” is just another flavor of the same social problem, honestly.

things have actual causes which cause the actual effects we complain about. to short-circuit the analysis with a talking point is not intellectually stimulating…

[kevingranade@mastodon.gamedev.place]

@ariadne @androcat yes the problem is the lack of quality, but a statement that it is LLM generated is a high accuracy signal indicating lack of quality.

[ariadne@social.treehouse.systems]

@kevingranade @androcat it isn’t. there are plenty of cases where machine transformations are perfectly fine. i have been using transformers to rewrite code for 20+ years. Coccinelle, for example is a type of transformer.

this is a problem of “garbage in, garbage out” paired with the time immemorial problem that some choose to bullshit their way through life and make it everyone else’s problem. those people don’t play by “the rules”.