Live data from Hacker News

Debian decides not to decide on AI-generated contributions

lwn.net

261–270 of 308 posts

Re: Debian decides not to decide on AI-generated contributions

#261
post #260

Earlier quoted context omitted.

> I'd MUCH rather see a holistic embrace and integration of these tools into our ecosystems. Telling people "no AI!" (even if very well defined on what that means) is toothless against people with little regard for making the world (or just one specific repo) a better place. That doesn't address the controversy because you are a reasonable person assuming that other people using AI are reasonable like you, and know h…

I see the solution as only engaging with reasonable persons and ignore the rest. And the problem is filtering them out. That is real work that can be draining and demoralizing as unreasonable persons usually have their sad story why they are the way they are, but you cannot do therapy or coaching for random strangers while trying to get a project going. So if people contribute good things, engage with them. If they c…

There must be a mechanism to rate the person submitting the PR. Anyone that wants to submit code to a well-known repo would first need to build a demonstrable history of making high-quality contributions to lesser known projects. I'm not very familiar with the open source scene but I'd find it very surprising if such a mechanism was not already in place. Seems like an obvious solution to the problem of vibe coders submitting slop.

Re: Debian decides not to decide on AI-generated contributions

#262
In 2025 it might have still been a discussion, but at this point, projects refusing any ai use for contributions or either just virtue signaling and willingly turning a blind eye, or have just chosen to silent quit.

It is over. Everyone is using AI (sure, you are the exception. For now).

Re: Debian decides not to decide on AI-generated contributions

#263
post #260

Earlier quoted context omitted.

I see the solution as only engaging with reasonable persons and ignore the rest. And the problem is filtering them out. That is real work that can be draining and demoralizing as unreasonable persons usually have their sad story why they are the way they are, but you cannot do therapy or coaching for random strangers while trying to get a project going. So if people contribute good things, engage with them. If they c…

There must be a mechanism to rate the person submitting the PR. Anyone that wants to submit code to a well-known repo would first need to build a demonstrable history of making high-quality contributions to lesser known projects. I'm not very familiar with the open source scene but I'd find it very surprising if such a mechanism was not already in place. Seems like an obvious solution to the problem of vibe coders su…

Oh it is a obvious solution, but not trivial to implement in a robust way.

Re: Debian decides not to decide on AI-generated contributions

#264
post #241

Earlier quoted context omitted.

> I'd MUCH rather see a holistic embrace and integration of these tools into our ecosystems. Telling people "no AI!" (even if very well defined on what that means) is toothless against people with little regard for making the world (or just one specific repo) a better place. That doesn't address the controversy because you are a reasonable person assuming that other people using AI are reasonable like you, and know h…

The curl project is proof of this. No rumors

Right, I was going to ask what "rumors"? The whole thing is documented in numerous projects, so much so that typically the inevitable AI guideline discussion is directly the result of a flood of low quality "contributions" that can't be handled by people managing the project.

It's not a rumor, it's a pattern.

Re: Debian decides not to decide on AI-generated contributions

#265

In 2025 it might have still been a discussion, but at this point, projects refusing any ai use for contributions or either just virtue signaling and willingly turning a blind eye, or have just chosen to silent quit. It is over. Everyone is using AI (sure, you are the exception. For now).

Sure, but does that mean we should accept Peter Theil's gospel in unquestioned?

Re: Debian decides not to decide on AI-generated contributions

#266

My question on AI generated contributions and content in general: on a long enough timeline, with ever improving advancements in AI, how can people reliably tell the difference between human and AI generated efforts? Sure now it is easy, but in 3-10 years AI will get significantly better. It is a lot like the audio quality of an MP3 recording. It is not perfect (lossless audio is better), but for the majority of user…

They can't, anyone who uses the tool correctly will be indistinguishable from their regular code contributions.

The ones that make the headlines here on HN are not subtle at all, they're probably the bottom of the barrel of AI users.

Re: Debian decides not to decide on AI-generated contributions

#267
post #260

Earlier quoted context omitted.

I see the solution as only engaging with reasonable persons and ignore the rest. And the problem is filtering them out. That is real work that can be draining and demoralizing as unreasonable persons usually have their sad story why they are the way they are, but you cannot do therapy or coaching for random strangers while trying to get a project going. So if people contribute good things, engage with them. If they c…

There must be a mechanism to rate the person submitting the PR. Anyone that wants to submit code to a well-known repo would first need to build a demonstrable history of making high-quality contributions to lesser known projects. I'm not very familiar with the open source scene but I'd find it very surprising if such a mechanism was not already in place. Seems like an obvious solution to the problem of vibe coders su…

> build a demonstrable history of making high-quality contributions to lesser known projects.

> Seems like an obvious solution

I'm not sure how you would rank quality of submissions for grading contributors like this. Just because a project accepted your PR doesnt make it high quality, the best we can hope for is that it was better than no accepting it?

Re: Debian decides not to decide on AI-generated contributions

#268

Earlier quoted context omitted.

> No, it's not that simple. AI generated code isn't owned by anyone, it can't be copyrighted, so it cannot be licensed. There is no way to reliably identify code as AI-generated, unless it is explicitly labelled so. Good code produced by AI is not different from the good code produced by software engineer, so copyright is the last thing I would be worried about. Especially given the fact that reviewing all pull reque…

At least with LLM providers, they have your prompts and output, and if they wanted to, they could identify what code was AI generated or not. Maybe they can be subpoenaed, maybe they can sell the data to parties who care like legal teams, maybe they can make it service anyone can plug a GitHub repo into, etc.

Jokes on you - I run LLMs only locally, and besides the most widely deployed code generating tool AFAIR is JetBrain tiny ~200M LLM, builtin into their IDE.

Re: Debian decides not to decide on AI-generated contributions

#269

Earlier quoted context omitted.

> I'd MUCH rather see a holistic embrace and integration of these tools into our ecosystems. Telling people "no AI!" (even if very well defined on what that means) is toothless against people with little regard for making the world (or just one specific repo) a better place. That doesn't address the controversy because you are a reasonable person assuming that other people using AI are reasonable like you, and know h…

How is an AI policy going to help prevent bad faith actors, though? People who are doing those harmful things with AI aren’t going to stop because of a policy. They are just going to lie and not admit their submissions are AI generated. At that point, you will still have to review the code and reject it if it is bad quality, just like you had to without an AI policy. The policy doesn’t make it any easier to filter ou…

The point of a policy is to make a decision and then communicate that decision, so that you don't end up in a lengthy argument (or make inconsistent decisions) each time a particular situation arises.

You're right that it won't stop anyone doing harmful things with AI - all it does is codify what is and isn't considered acceptable by a project, and make it easier to justify rejections.

If a project wants to continue evaluating submissions on a case-by-base basis (and has the manpower to do it without the support of a policy) then that's entirely their choice, of course.

Re: Debian decides not to decide on AI-generated contributions

#270

Earlier quoted context omitted.

There must be a mechanism to rate the person submitting the PR. Anyone that wants to submit code to a well-known repo would first need to build a demonstrable history of making high-quality contributions to lesser known projects. I'm not very familiar with the open source scene but I'd find it very surprising if such a mechanism was not already in place. Seems like an obvious solution to the problem of vibe coders su…

> build a demonstrable history of making high-quality contributions to lesser known projects. > Seems like an obvious solution I'm not sure how you would rank quality of submissions for grading contributors like this. Just because a project accepted your PR doesnt make it high quality, the best we can hope for is that it was better than no accepting it?

I think we need one of those solution to spam checklists[1], but for AI slop.

[1] https://craphound.com/spamsolutions.txt

Post reply on HN