2026-04-03 09:07 UTC
@IngaLovinde @aredridel anyway my point was not that doing adversarial reviews is easy, but that doing them only to new contributors gives a false sense of security. The xz story proves that sophisticated attackers are aware of this and use it against the OSS community. Again, this is not an LLM problem. It’s just a difficult problem.
Replies (1)
-
@IngaLovinde@embracing.space 2026-04-03 09:15
@illogical_me @aredridel another way to optimize adversarial reviews is to send the author home every time you see even the slightest imperfection or questionable or just not very clear part in their code, which is a path Linux kernel takes afaik. Linux kernel is also infamous for being very hostile towards first-time contributors, despite approaching everybody the same regardless of whether it's their first contribution or not. If you introduce Linus-style code reviews in your project, then the problem of LLMs being adversarial will be easily solved by (almost?) all LLM-generated code being rejected outright on merit. Also nobody will contribute to that project.