I’ve found myself feeling unmoored by the current crop of FOSS contributions. I genuinely don’t know how to proceed.

Of course there’s the slop where the PR checklist gets deleted & almost all items violated. The truly annoying part about this is that I always try to be kind & not a stickler about policies. I guess I don’t owe kindness to a bot, but it’s a bad look to be assertive in public. (1/5)

I do not enjoy being a jerk—I want to keep my projects a friendly place that people enjoy to be in because FOSS is about people! Some people appreciate the opportunity of having the license to be assholes but that's not me. The idea of lashing out at someone by mistake horrifies me.

An even more complicated situation is well-intentioned-but-bad-ideas implemented well. There’s no time to think ideas through anymore. (2/5)

Anyone can tell some LLM to implement their first best idea, but the first thing that comes to mind is rarely the best solution to anything.

LLMs are great to prototype real fast, but dropping a diff hundreds of lines long—no matter how clean the code—on someone’s porch puts them in an uncomfortable position. (3/5)

I can only reiterate: FOSS is about people. As LLM code improves the first problem will go into the background but the social problems are only gonna get worse. And we've just seen how it works if we try to fix this asymmetry by using LLMs ourselves (spoiler: it's 4k compromised dev machines thru GitHub issue title injection). (4/5)
@hynek …GitHub issue title injection?! 😱
A GitHub Issue Title Compromised 4,000 Developer Machines

A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.