Forgot your password?
typodupeerror

Comment Re:Yeah we kind of think that (Score 1) 75

Yes. There have been several attempts to automate software generation. When I studied CS, the 5GL project had just failed resoundingly. The idea was to write specs in constraint logic and then have the machine write code. What made it fail? Turns out writing a full spec is a lot more effort and requires significantly better qualifications and experience than writing the code directly. The idea of getting code automatically from a spec has since failed again with other approaches, essentially due to the same problem.

Now, LLM code generation has the same issue: If you do not explicitly specify it, you may or may not get security features, for example. Input validation, minimal privilege, authentication on APIs, secure session tokens, etc., may be there, may be there but insecure, or may be not there. But LLMs are worse: Even if you specify everything, the LLM may still omit stuff. And this can happen due to several different reasons, like window compression, training data claiming to do one thing, but not actually doing it, etc. Hence LLMs are _worse_ than those failed previous attempts.

Essentially, LLMs are just a way to make software creation more risky, more expensive and more stressful (reviewing LLM code is apparently a really bad experience). Or you can make cheap, somewhat functional code that is an insecure, unmaintainable, intransparent mess.

Comment Re:Damn. (Score 1) 75

The problem is not on the tech side. The problem is on the legal side. The problem is that LLM code does not get new copyright. If nobody was copied close enough, LLM code does not qualify for copyright and you cannot slap a license on it. But if it is close enough to something in its training data, it will very likely be found to be still unter the original copyright, license and ownership. And that is a legal nightmare.

Yes, this nuke may need a few years to detonate. But anybody that followed the SCO lawsuits should understand how potentially catastrophic this is. Only requiring a tag was already a pretty bad decision, but it would at least have allowed triage and ripping stuff out. And if a contributor had been lying and omitting the tag, the person liable would likely have been that contributor. But if the tag is optional, that responsibility shifts to the maintainers. Not good at all.

Now, it is possible this will not blow up. But risking it like that is just one thing: Deeply stupid.

Comment Traffic is traffic (Score 3, Interesting) 33

A lot of the bots are indistinguishable from real users and if you have investors or advertisers on your platform the last thing you want to do is Chase those bots off. What you want to do is maintain just a little bit of plausible deniability.

Simply put online advertising doesn't work and the only way to get the engagement numbers needed to make it even look like it might work is with a constant stream of rage bait and outrage porn. Basically any platform by design has to enshitify.

I think YouTube just barely avoids the worst of it. If you pay attention to YouTube you'll find that you can actually curate your feed. So for example a while back I got tired of all the right wing douche nozzles and dipshit lefties trying to monetize my political rage so I started eliminating them. YouTube got the message. Reddit simply does not give you the ability to do that and while I have more or less stopped using it except for a few highly curated forums it's still blasting my feed with worthless political shit.

Don't get me wrong I'm political as fuck and I am all in on useful politics. I have a couple of channels on YouTube I still subscribe to mostly just Belle of the ranch. Channels that provide actual useful information that I can act on.

But after the 2024 election I figured out that 90% or even 95% of the content out there for politics is either right-wing propaganda or left-wing anti-centrist rage bait.

So I started asking myself why everything is so fucking useless and figured out pretty quickly that the internet runs on outrage and cat videos and these days it's mostly outrage. What the cool kids called Doom scrolling.

So because of that you need the bots. If nothing else they are good at keeping the rage going and like I said they look like real users to your advertisers and investors.

As for why they're getting rid of them now it's probably a combination of the overwhelming hit to bandwidth that they just can't keep up with combined with the fact that they have probably figured out how to filter the AI bots but allow the rage bots to continue to operate

Comment Re:Beware of knee-jerk reactions (Score 1) 75

Exactly. If you allow LLM generated code in your project, you may lose it completely. Suddenly it may be under a different license, or, worse, several different ones. And your ownership and original license may be gone. The GCC folks understand that catastrophic risk. It looks like Linus does not or does not want to deal with it. That does not work and is an exceptionally bad idea.

The absolutely very least and lowest level of caution would be mandatory tagging of all LLM written code. Because with that you at least have a chance to rip it out (at great cost) later. But if you do not even do that, you will very likely kill the project long-term.

Comment Re:LLM ~ Compiler? (Score 1) 75

An LLM is not a compiler or a valid step between specification and code, unless you put a lot of safeguards and extra effort in place. First, an LLM comes without specification of what it will do. The Language specification a compiler is based on is critical for it to be useful at all. Otherwise you have no reliable idea what the compiler will do with some input and things may change without warning. For an LLM, this is even worse: Things may change between one run and the next and things may change an entirely different place when you add or change something in one place. The whole process is opaque and not actually well understood.
Second, LLMs hallucinate and they do it in surprising and unpredictable ways. And third, an LLM may arbitrarily decide to leave out stuff that is important, even when you specified it. This is devastating for all security properties and for general reliability.

Hence while Linus is not generally wrong, he vastly overestimates the result quality and performance of LLMs.

And on the legal angle, there is a very good reason why the GCC folks have done a categorical "no" to LLM code. Depending on how the legal battles go, some LLM code may end up being owned by the original owners of the training data before it was stolen. The very least you need to do to prepare for that possibility is being able to identify it all to be able to rip it out. Making the tag optional is exceptionally foolish. Sure, people can lie about that tag, but then it is on them. But if you make it optional, that is on you.

Comment Re: That's a serious crime (Score 1) 119

No, a good lawyer would explain why unlawful restraint doesn't apply in this case.

Section 2903 seems written such that "another" means a natural person (someone who has "liberty", as a robot generally does not, because it is chattel). PA law classifies delivery robots as pedestrians for the purpose of Title 75 of state law, not as people or "another" under Title 18. Do you have some precedent that says false imprisonment can be committed against a robot?

Comment That is a really bad idea (Score 1) 75

Not because of patch quality, the quality gates on the kernel are fine. It is a really bad idea because of copyright. Depending on how the copyright battle in the courts goes, this may seriously taint the kernel and removal of the tag may make cleanup impossible.

Shows that Linux, unfortunately, does not understand the legal angle.

Comment Re:what law (Score 1) 119

No law says that, just like no law says you as a pedestrian have the right of way over other pedestrians; it says who must yield the right of way. Regardless of who has the right of way, neither you nor professors are generally allowed to block other pedestrians from proceeding down a sidewalk. In Pennsylvania, it doesn't matter if the other pedestrian is a delivery robot.

Comment Re:Good start (Score 1) 119

As for Islamic countries, there's only two that ban women from driving: Afghanistan and Turkmenistan - both de facto / arbitrary / adminstrative bans rather than official bans (e.g. refusing to issue/renew licenses, requiring guardians for long-distance travel, or things of that nature). Saudi Arabia revoked their ban in 2018. And Iran has always allowed women to drive (though they have to cover their hair while driving).

Slashdot Top Deals

In less than a century, computers will be making substantial progress on ... the overriding problem of war and peace. -- James Slagle

Working...