Open source projects drown in bad bug reports penned by AI
www.theregister.com
Python security developer-in-residence decries use of bots that 'cannot understand code'
  • ArbitraryValue@sh.itjust.worksEnglish
    2·
    3 days ago

    Edit edit: it’s all in the article, darnit. Sorry.

    It is? I must have missed it but I can’t find any discussion of motivation even on a second read-through.

    • Nightwatch Admin@feddit.nlEnglish
      1·
      3 days ago

      I meant it’s all about security vulnerability submissions, and although not explicit in the article, those submissions are therefore very likely

      • meant to up the reputation for xz-like attacks
      • meant to annoy/bully the devs
      • denial of service by delaying triage and therefore delaying creating patches
      • submitted by boatloads in the hope of cashing in on bug bounties