News for hackers. Stuff that matters.

A comment on Ginux: A New Kernel Runs Linux Userspace, Made via Human-Directed AI Engineering. Parent comment

Re:Ginux: A New Kernel Runs Linux Userspace, Made via Human-... by palata on Monday November 09, 2026 @08:49AM (#50425565)
> Often they are very subtle errors based in very subtle misunderstandings.

I'd like to address this specifically. Introducing a very subtle bug can be an adversarial move, right? Say I want to introduce an exploit into a project, I can try to do that. And it is a risk in any open source project where contributions come from "random people on the Internet".

Now my question: as a maintainer, is it better for me to try to convince myself that all those contributions I receive from random people are well intentioned (and maybe miss subtle bugs that were introduced on purpose), or is it better to have an AI replace those contributors?

I don't have an answer, but I think it is an interesting question. As a maintainer, my bottleneck has generally been more around reproducing, understanding the bug and testing. Less around producing the code. And an AI can produce the code I ask it to produce, copying my style, and I can ask it to start over as often as I want.

[ Parent | on HN ]
Re:Ginux: A New Kernel Runs Linux Userspace, Made via Human-... by vbezhenar on Monday November 09, 2026 @10:06AM (#50426660)
Most contributors nowadays probably use LLM. And those who don't, often produce code worse than LLM.

If you're not OK with random code, you gotta rewrite everything yourself. So treat their contributions just as inspiration and work from there.

And if you're OK with random code, maybe it's safer to just use LLM and ask it to rewrite the contributed code? At least you know that LLM is not ill-intentioned.

[ Parent | on HN ]
Re:Ginux: A New Kernel Runs Linux Userspace, Made via Human-... by palata on Monday November 09, 2026 @10:26AM (#50426923)
Yeah, that's pretty much exactly what I meant, but you expressed it better.

> At least you know that LLM is not ill-intentioned.

It's more complicated than that, but yeah... I see what you mean here and I agree :-). Probably the LLM is not trained to insert bugs into my repositories, I guess? But anyway, in the future I could totally imagine that some open weight models are "mainstream" and "audited", at which point it sounds harder to target my repo from the LLM than from a PR by a random account.

[ Parent | on HN ]