51–60 of 116 posts
Earlier quoted context omitted.
I'd warn HN users not to click on that link simply because it will load a 26Mb message that will likely cause quite a strain on kernel.org's servers if everyone here does it.
Thank you for the warning. I rarely click on links these days though; only exception I make for HN links for main articles.
Will never understand why some people prefer mailing lists to do development, it always feels like the most convoluted way to hold a discussion, especially if there are multiple topics at the same time. It probably doesn't really change that much in this scenario but with a forum or any other topics-based platform you can at least just close and ignore these things without it affecting everyone else.
Over the last year there have been way too many stories and Twitter posts like these.
Yes, maintainers are overloaded, but that's only because we haven't yet built the tools to support them.
Other than such statements, I would, as a builder like to hear the sorts of tools and requirements maintainers are looking for which would make their work easier!
We need to move fast without breaking things.
I'd really like maintainers to get their hands dirty with AI agents as well to help speed up the reviews. Over the last year there have been way too many stories and Twitter posts like these. Yes, maintainers are overloaded, but that's only because we haven't yet built the tools to support them. Other than such statements, I would, as a builder like to hear the sorts of tools and requirements maintainers are looking…
Feel free to fork the kernel and maintain your own vibe-coded disaster.
"Torvalds' remarks contrast with recent comments from fellow kernel maintainer Greg Kroah-Hartman, who recently told The Register that AI has become an increasingly useful tool for the FOSS community." Does it? Both points can be true at the same time.
AI can amplify your intelligence just as easily as it can amplify your stupidity. All while telling you how smart and brilliant you are.
I think it's time the report-only intake should stop. If a reporter can't reproduce at least one use case or can't summarise it in two sentences, it should be classified as spam. LLMs write beautiful reports, it's just that sometimes it doesn't bear anything resembling the truth.
couldn't an llm be used for verification like we're seeing some OSS projects do? Some projects are moving so fast, its almost certain there's little human involvement.
But now we need an AI tool to consolidate the triage utilities.
"Torvalds' remarks contrast with recent comments from fellow kernel maintainer Greg Kroah-Hartman, who recently told The Register that AI has become an increasingly useful tool for the FOSS community." Does it? Both points can be true at the same time.
Linus also said “AI tools are great, but only if they actually help, rather than cause unnecessary pain and pointless make-believe work,” he wrote. “Feel free to use them, but use them in a way that is productive and makes for a better experience.” So I think the closing remark from the register isn’t really appropriate given the context from the quotes they pulled.
it's just that in the past people most times didn't find security vulnerabilities independently of each other without knowing about the others en mass
worse it's non trivial to dedup on the submitter side, nor on the receiver site (as long as we stay with a classical mailing list format)
and while this might be fixable with an AI auto grouping duplicates etc. getting that right is _hard_ especially if we consider that there can be a lot to gain for an adversary to use prompt injection and similar to cause an effective "hiding" of "useful" security issues (e.g. by wrongly causing them being labeling as duplicate).
In addition to all the technical problems this causes some other problems: 1.) additional cost you can intentional (maliciously) increase 2.) dependence on some LLM provider 3.) trust problem wrt. the used LLM provider. Some of this can be avoided by running open models on sponsored owned hardware, but at the cost of often outdated LLM tech, higher cost, now needing to maintain additional hardware etc.
Earlier quoted context omitted.
Thank you for the warning. I rarely click on links these days though; only exception I make for HN links for main articles.
How do you navigate the web, everything is CTRL+L then manually type the address, or you have some fancier solution?