cross-posted from: https://piefed.world/c/tech/p/1131733/linus-torvalds-says-ai-powered-bug-hunters-have-made-linux-security-mailing-list-almost
The continued flood of AI reports has basically made the security list almost entirely unmanageable, with enormous duplication due to different people finding the same things with the same tools. People spend all their time just forwarding things to the right people or saying “that was already fixed a week/month ago” and pointing to the public discussion.
Which is all entirely pointless churn, and we’re making it clear that AI detected bugs are pretty much by definition not secret, and treating them on some private list is a waste of time for everybody involved - and only makes that duplication worse because the reporters can’t even see each other’s reports.
AI tools are great, but only if they actually help, rather than cause unnecessary pain and pointless make-believe work. Feel free to use them, but use them in a way that is productive and makes for a better experience.
The documentation may be a bit less blunt than I am, but that’s the core gist of it. So just to make it really clear: if you found a bug using AI tools, the chances are somebody else found it too. If you actually want to add value, read the documentation, create a patch too, and add some real value on top of what the AI did. Don’t be the drive-by “send a random report with no real understanding” kind of person. Ok?
I am nowhere close to be as smart as him or people like him, but I abandoned a project because of sloppy massive PRs and started refusing to put my name / approval on most PRs at work also because of the same thing, I am the tech person who stayed the most here and not gonna waste my time reviewing slop for others to take credit (just push it with Claude, dev XX will review it properly before it hits prod).
The decline started, but I will keep protecting my side in this company while I am here. I use LLMs occasionally (so I am not going against management trying to make us more productive) to type less, or extract smaller snippets, … but the change is 100% what I had in mind and I hold myself 100% responsible for the output.