alt Hacker NewsThis was my take on it as well. Which in many ways makes a lot of sense and is pragmatic.
The thing which I think is going to be a very sore lesson for everyone at some point is that if anyone uses AI it becomes a burden for everyone. Even in projects that reject all AI usage.
What I can do is create 50 personas that all contribute patches. 40 of them get called out and are distrusted, but 10 make it through. I can give more focus on those 10 to ensure their trust level increases. Then slowly have them all come together to shepard some subsystem where I'm going to be the only real person involved and can sign off on my own work in a that looks like I have oversight from the outside.
In the past this was possible but took a very high cost. You need a bunch of competent software engineers who you can trust not to blab their secret mission. Today anyone can give it a try.
I don't disagree, and AI helps scaling many things: good work, bad work, malware.
However, I remember that a couple of university researchers (PhD candidates maybe?) thought it would be a good idea to introduce security issues in Linux, and managed to do it. Without AI and without a lot of resources.
A consequence of that was that Linux immediately reverted all the patches coming from that university, saying "we don't know if we can trust you guys" (but really I guess as a way to tell universities "if you fuck with us we ban you, now keep your people in line").
And that's what I was thinking about when I said that if too many contributors misbehave, as a maintainer I will just stop accepting contributions from people I don't know. And maybe that will happen. Maybe it will be harder and harder to just be accepted into the club of the people who can send a contribution and have it reviewed at all.