We’ve been getting a lot of AI coded submissions recently, as well as lots of reports asking to remove them.
Should we remove these posts, or not?
We’ve been getting a lot of AI coded submissions recently, as well as lots of reports asking to remove them.
Should we remove these posts, or not?
I’ve recently been pondering the future impact of AI on coding, while trying to filter out the current noise surrounding the issue (since all it does is muddy the waters). There’s a lot of amateurish supposition to follow, but since you appear to be getting fewer thought out responses than “AI-bad-kill”, take it with a pinch of salt.
There was a recent article on the open source software that props up the internet - (paraphrasing here) one of these repositories had (pre-AI) a user called Jin Yue or Jin Yin who made hundreds of useful pull requests, gained the trust of the repo maintainer and was eventually given admin privileges, only to surrepticiously merge malicious code when no one was looking (eventually discovered ~a month after the fact). I imagine that (likely) state-sponsored attempts like these will make more use of AI in the future for quicker turnaround, and that maintainers will also eventually use AI to quickly audit submitted code for security flaws.
As far as open source software channels are concerned, I imagine there will be a decent amount of low effort malicious software that makes heavy use of AI, submitted to these channels. In such an environment, whether or not users are permitted to candidly disclose AI usage without reprisal will likely make a huge difference, since honest disclosure would invite security-minded people to audit fault-prone AI-assisted code - something that malware distributers will try to avoid at all costs (thereby allowing a distinction that can be leveraged to form between the two).
Just my two cents.