I want this but as a Linux distribution.

[hack_char@infosec.exchange]

@mcc
AI assisted code generation is here to stay. It's not random and probably one of the best uses for an LLM. I'd only be concerned if LLM generated code was commited without review.

I only see 2 PRs that are marked ai-assisted for KeePassXC and neither look like a problem. The large commit @nina_kali_nina to bitwarden/clients also used checkmarx scanner, github-advanced-security scanner and claude to review, but, there are also 11 non-bot reviewers listed on it.

[mkljczk@pl.fediverse.pl]

@mcc@mastodon.social so I’m assuming the index is exclusively companies that have never touched so-called ‘AI’, which is what you’re expecting from said Linux distro?

[mcc@mastodon.social]

@mkljczk Eventually, I'd expect we should be able to build a complete computer's repository of software written only by people who have verified they haven't used LLM "code assistants". Since companies are unlikely to provide such verification, we should get as close as we should possibly get.

But since you asked, yes, I think any software or OSS code contributions from a corporation should be treated with concern right now, since many have adopted mandatory LLM policies.

[wronglang@bayes.club]

@glyph @mcc @itamarst yeah it's a common marketing switcheroo to make critics look like luddites, you just assume you're correct and fund a strategy till people forget how to do things any other way.

[mkljczk@pl.fediverse.pl]

@mcc@mastodon.social can't imagine a Linux distribution, even just a fork of Linux kernel that would be free of corporate contributions from the past few years and the future ones as a sustainable project

[mkljczk@pl.fediverse.pl]

@mcc@mastodon.social though i can absolutely imagine smaller kernel projects with explicit anti-'ai' getting serious

[mcc@mastodon.social]

@mkljczk That is not what the people who originally created Linux believed. It's not what we believed when I first started using Linux in like 1997-1998. The idea that the open source movement is driven by the leavings of large otherwise-propreitary software corporations is something that developed after the fact.

[tragivictoria@mastodon.catgirl.cloud]

@debacle@framapiaf.org @mcc@mastodon.social thats just someone taking debian and porting it somewhere else. It happened with some BSD and android too

[zrb@social.hildebrind.space]

@mcc @mkljczk what this has really done is erode the base level of trust that I extended by default, when looking for software / library / package to accomplish something, or when reviewing someone else's contribution to code I maintain

It used to be, I would read a bit of the code and docs to get a feel for the person's understanding of the topic and programming style, and make an initial decision based on those general vibes

Now, someone can pass a vibe check and then still slip in insidious errors that no human developer would introduce

[timshel@social.sparkway.org]

@mcc @gabrielesvelto @luana @nina_kali_nina I was wondering how their review process is, so looked at the PR (https://github.com/bitwarden/clients/pull/18584) and there is like 10 reviews apparently done by humans. And I'm like 10 wtf 🤨.

[fabrice@fosstodon.org]

@gabrielesvelto It's interesting to think about why proper refactoring tools have been a lot less successful than LLMs now-days (in term of usage). Is it just cost? or the more "human like interaction" you get from LLMs? or something else?

@luana @nina_kali_nina @mcc @Timshel

[varjolintu@mastodontti.fi]

@mcc I was banned because of my comments? Very nice.

[codingphysicist@mstdn.social]

@mcc I'm not aware of any alternative clients and currently I'm using the official Bitwarden ones.

[mawhrin@circumstances.run]

@gsprs virtues are good, virtues are supposed to be signaled, 'tis good to be virtuous and ethical.

(can you tell me what makes the promptfondlers to be so annoyingly proselytyzing though? did anyone ask for your opinion?)

[rando@chaos.social]

@CodingPhysicist @mcc I'm aware of two alternative (open source) clients: https://github.com/doy/rbw and https://github.com/quexten/goldwarden (though it seems like the latter is not actively developed anymore).

[mcc@mastodon.social]

@m oh… this post was meant to be a reply to your post https://mastodon.social/@mcc/116115453811522063

[gabrielesvelto@mas.to]

@fabrice I don't know. I remember using IntelliJ tools for doing significant refactoring on an old Java codebase some 15+ years ago and they were already quite powerful. I don't know why anyone who did not use those kind of tools in the past suddenly feels like an unreliable system is a good idea for mechanical refactoring. 🤷

[xek@hachyderm.io]

@Moore @graydon You've both been around as long as I have, so you've seen this: for literal decades, the "tech" industry has increasingly been "slap together a bunch of open source code to implement a product innovation, without any meaningful technical innovation." LLMs are just the culmination of that process, removing the expensive open-source-gluers from the equation, and, as a bonus, creating code that has been laundered clean of any pesky licensing concerns.

If you play this arc out, it suggests the loss of "indigenous" technical capabilities for anyone but the LLM companies. This is very, very dangerous, given that we seem to be slipping into a global oligarchy.

Very early on, Brazil heavily regulated computer imports, mostly to guarantee that they weren't fully reliant on foreign-origin technology. They understood that embracing tech exclusively owned by the US and Europe was inviting a new form of colonialism. LLMs are the same thing, just in a very cyberpunk corporate feudalism sort of way.

[gsprs@mastodon.social]

@mawhrin I couldn’t ask for an example of holier than thou attitude and proselytizing better than the first half of this post, the other half honestly looks like parody after reading it.

[mawhrin@circumstances.run]

@gsprs the only people who complain about virtue signalling are the gobshites: the racists, the white supremacists, the misogynists, you know the type.