I think this is probably less effective than if there was some sort of "credit" or reputational score for reporting that seems like something GitHub would have the information to implement.
We will ban you and ridicule you in public if you waste our time on crap reports
81–90 of 653 posts
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#82I've been helping a bit with OWASP documentation lately and there's been a surge of Indian students eagerly opening nonsensical issues and PRs and all of the communication and code is clearly 100% LLMs. They'll even talk back and forth with each other. It's a huge headache for the maintainers. I suggested following what Ghostty does where everything starts as discussions - only maintainers create issues, and PRs can…
> Indian students Is this cultural? I ran a small business some years ago (later failed) and was paying for contract work to various people. At the I perceived the pattern that Indian contractors would never ever ask for clarifications, would never say they didn't know something, would never say they didn't understand something, etc. Instead they just ran with whatever they happened to have in their mind, until I cal…
Of course it’s cultural, they have to compete with thousands people just like them in environment where human life is cheap and anyone is replaceable. Any authority have huge weight, which comes from historical system how society is separated.
And then any education they receive assumes cheating at exams, then cheat with CV, then cheat with work they do. It’s all about appearances.
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#83I've been helping a bit with OWASP documentation lately and there's been a surge of Indian students eagerly opening nonsensical issues and PRs and all of the communication and code is clearly 100% LLMs. They'll even talk back and forth with each other. It's a huge headache for the maintainers. I suggested following what Ghostty does where everything starts as discussions - only maintainers create issues, and PRs can…
[flagged]
> I have yet to meet one that hasn't openly admitted to grift or caught grifting.
This is just lazy casual racism.
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#84Earlier quoted context omitted.
Why you don’t just put an AI guardian to close or to ask them to change the story. Or shadow ban
Subjecting every real contributor to the "AI guardian" would be unfair, and shadow banning is ineffective when you're dealing with a large number of drive-by nuisances rather than a small number of dedicated trolls. Public humiliation is actually a great solution here.
You could easily guard against bullshit issues. So you can focus on what matters. If the issue is legit goes ahead to a human reviewer. If is run of the mill ai low quality or irrelevant issue, just close. Or even nicer: let the person that opened the issue to "argue" with the ai to further explain that is legit issue for false positives.
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#85Context: [1, 2] > Open source code library cURL is removing the possibility to earn money by reporting bugs, hoping that this will reduce the volume of AI slop reports. > cURL has been flooded with AI-generated error reports. Now one of the incentives to create them will go away. [1] https://news.ycombinator.com/item?id=46701733 [2] https://etn.se/index.php/nyheter/72808-curl-removes-bug-boun...
Money for a report and a patch, with convincing test cases, might be worthwhile. Even if a machine generates them.
> Even if a machine generates them.
Why? If it is a purely machine generated report there is no need to have dozens of third parties that throw them around blindly. A project could run it internally without having to deal with the kind of complications third parties introduce, like duplicates, copy paste errors or nonsensical assertions that they deserve money for unrelated bugfixes.
A purely machine generated report without any meaningfull contribution by the submitter seems to be the first thing you would want to exclude from a bug bounty program.
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#86Earlier quoted context omitted.
[flagged]
Taught by whom? Without evidence, this just comes of as a racist trope. FWIW, the Indians I've worked with have all been very honest and dedicated to their work.
Parent commenter is, as you’ve said just parroting racist tropes.
Anecdotally, I’ve worked with quite a lot of South Asian people, and there is an art to communicating with them - they’re remarkably indirect but thrrr are certain signs that they disagree. If you apply the same amount of skepticism to an Americans “super awesome mega amazing” bluster, you’d be pretty close to the mark IME.
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#87Earlier quoted context omitted.
Why you don’t just put an AI guardian to close or to ask them to change the story. Or shadow ban
I intensely dislike the idea that we need more AI in order to deal with AI. If I ever need to start using an AI to summarize text that someone else has generated with AI from a short summary, I'm gonna be so fucking done.
[flagged]
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#88From https://curl.se/docs/code-of-conduct.html : "As contributors and maintainers of this project, we pledge to respect all people who contribute through reporting issues, posting feature requests, updating documentation, submitting pull requests or patches, and other activities" Why have a code of conduct while being hostile to contributors? I think they should handle this differently.
[deleted]
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#89I am friends with a solo maintainer of a major open source project. He repeatedly complains that at the beginning of some semester, he sees a huge spike of false/unproveable security weakness reports / GutHub issues in the project. He thinks that there is a Chinese university which encourages their students to find and report software vulns as part of their coursework. They don’t seem to verify what they describe is…
>I worry that the fears teachers had of students using AI to submit homework has bled over into all aspects of work.
As one does in academia, so to the market, because now we have financial incentive. It ain't going to stop.
Re: We will ban you and ridicule you in public if you waste our time on crap reports
#90I've been helping a bit with OWASP documentation lately and there's been a surge of Indian students eagerly opening nonsensical issues and PRs and all of the communication and code is clearly 100% LLMs. They'll even talk back and forth with each other. It's a huge headache for the maintainers. I suggested following what Ghostty does where everything starts as discussions - only maintainers create issues, and PRs can…
> Indian students Is this cultural? I ran a small business some years ago (later failed) and was paying for contract work to various people. At the I perceived the pattern that Indian contractors would never ever ask for clarifications, would never say they didn't know something, would never say they didn't understand something, etc. Instead they just ran with whatever they happened to have in their mind, until I cal…
That is a cultural thing, and one of the first things you learn to handle when working tightly together with Indians as an outsider.
I can't remember all the techniques but a simple trick is to ask them to repeat their understanding back to you before they start working on a thing.
But I don't think it's connected to sending "malicious" reports. That seems rather to be to pad their resume and online presence while studying to get an edge in hiring.