fresh_broccoli
Joined 1 year ago
Joined 1 year ago
Not "separately to every single downstream", there is the "linux-distros" mailing list for disclosures: https://oss-security.openwall.org/wiki/mailing-lists/distros
This random blogpost from 2022 serves as a proof that disclosing kernel vulnerabilities to the distros list is a well-known practice: https://sam4k.com/a-dummys-guide-to-disclosing-linux-kernel-...
I agree it's a shame that the process isn't more streamlined and the kernel developers aren't forwarding the reports to the distros list.
I think this debate is mainly about the value of human labor. I guess when you're a millionaire, it's much easier to be excited about human labor losing value.
In my experience, open-source maintainers tend to be very agreeable, conflict-avoidant people. It has nothing to do with corporate interests. Well, not all of them, of course, we all know some very notable exceptions.
Unfortunately, some people see this welcoming attitude as an invite to be abusive.
Some people feel they're entitled to being open-source contributors, entitled to maintainers' time. They don't understand why the maintainers aren't bending over backwards to accomodate them. They feel they're being unfairly gatekept out of open-source for no reason.
This sentiment existed before AI and it wasn't uncommon even here on Hacker News. Now these people have a tool that allows them to put in even less effort to cause even more headache for the maintainters.
I hope open-source survives this somehow.
The closest thing is probably Orange Pi RV2, but it has an outdated SoC with no RVA23 support, meaning some Linux distros won't even run on it. Its performance is also much poorer than of the RPi5.
I think this one is a much closer fit: https://news.ycombinator.com/item?id=46661308
1. Let's start with where the post was published. Check what kind of content this blog publishes - huge volumes of random low-effort AI-boosting posts with AI-generated images. This isn't a blog about history or linguistics.
2. The author is anonymous.
3. The contents of the post itself: it's just raw AI output. There's no expert commentary. It just mentions that unnamed experts were unable to do the job.
This isn't to say that LLMs aren't useful for science; on the contrary. See for example Terence Tao's blog. Notice how different his work is from whatever this post is.
For example, I'd expect "criticizing expert medical and scientific consensus on healthcare for our minors" to link to some kind of article describing what Jesse Singal said about this topic and why it's incorrect, but instead it links to a general page about "healthcare providers serving gender diverse youth" that doesn't even mention anything about the accused person or their writings.
This is not the right way to contribute to a project. If I were the maintainer, I wouldn't engage with it either, just like I don't reply to spam emails.
Should all politicians' remarks be reproduced verbatim with absolutely no commentary, no fact-checking and no context? Should an article about an airplane crossing the Pacific include "some experts believe that this is impossible because Earth is flat?"
Excessive bias in media is definitely a problem, but I don't think that completely unbiased media can exist while still being useful. In my expierence, people looking for it either haven't thought about it deeply enough, or they just want information that doesn't make their side look bad.