Hey, I need a bit of moral compass here. We can agree that using AI to generate code is bad, no questions asked. The environmental and societal impact is awful, the skill loss is real etc.

But! What about security? The past months have shown that AI has become actually good at finding real security issues which have been missed for years in high-profile software.

So not using AI for that might actually expose users to undiscovered security issues which are then found and exploited by more ruthless people.

In light of that: How would you like the maintainer of your favourite Open Source projects use AI?

Boost the hell out of this please.

Talked to a software engineer at Microsoft working on Copilot Studio today at a social event and he said he was ashamed that he hadn’t written a single line of code in over three months. “I used to take pride in my work.” (They simply create plans in natural language and feed it to the LLM which generates the code. They can’t even do human code reviews anymore as there’s too much code being generated.)

He said a lot of them were waiting for a catastrophic event (something that would take down critical infrastructure) to get top management to reverse course. He seemed to think such a failure was very likely.

Given what we’ve been seeing recently, I tend to agree with him. Although I feel they will just double down. There’s too much money in the pot for them to fold.

#AI #microsoft #LLMs

RE: https://tldr.nettime.org/@tante/116605858023186072

Google Search rests on a social contract: their bots can crawl our sites, they can index our sites, and they can show excerpts of our sites because

and •only because•

they send people to our sites. •Our• sites, our words, with our design, with our links, with our context and our aesthetics, shared the way we want to share them.

Google is announcing — unambiguously and with great fanfare — that they are now fully breaking that already-ragged contract. We should reciprocate.

1/2