a number of people have expressed a very strong distaste for building systems that automatically generate exploits. I think there's a bit of nuance here that isn't immediately obvious

if you are going to build any kind of LLM-driven (more generally, fuzzer-driven) system that searches for security issues, you really want it to produce exploits (automatically or otherwise), because if it doesn't, you'll end up swamping people doing triage with a massive wave of invalid bug reports. it would be worse than no such thing at all

in a way, the exploit-generation capability (which is not new nor was it invented for AI stuff, DARPA has been working on this capability for ages) reduces maintainer burnout. you may have seen the Curl maintainer talk about that. I think that's important to consider

Last weekend I had a blast participating in the Open Hardware Summit 2026 in Berlin! Lovely crowd of curious experimenters, artists, tinkerers. I feel super inspired and empowered! I was surprised to see so many projects from craft and technology intersection. Craft has a very special place in my ❤️ and my own practices.
Thank you, @oshwassociation for organising such a colourful, inspiring and welcoming event! 🙌🏼

https://2026.oshwa.org