Re:AI tooling must be disclosed for contributions
by falcor84 on Thursday August 21, 2025 @03:51PM
(#44977245)
Trust is absolutely a thing. Maintaining an open source project is an unreasonably demanding and thankless job, and it would be even more so if you had to treat every single PR as if it's a high likelihood supply-chain attack.
[ Parent
| on HN ]
Re:AI tooling must be disclosed for contributions
by fnimick on Thursday August 21, 2025 @04:31PM
(#44977696)
While true, we really should be treating every single piece of external code as though it's malicious.
Re:AI tooling must be disclosed for contributions
by tsimionescu on Thursday August 21, 2025 @06:01PM
(#44978629)
No, we shouldn't. We live in a society, and that level of distrust is not just unrealistic, it's disastrous. This doesn't mean you should share your house keys with every drive by PR contributor, but neither should you treat every PR as if it's coming from Jia Tan.