<![CDATA[I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.]]>I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.

https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source

]]>https://forum.fedi.dk/topic/d9617855-64f3-4c00-b872-9d2c27756c89/i-understand-that-anthropic-thinks-they-re-doing-open-source-projects-a-favor-here-but-what-they-re-actually-doing-is-creating-an-enormous-amount-of-work-for-people-that-they-are-not-paying.RSS for NodeSun, 11 Oct 2026 12:56:44 GMTFri, 09 Oct 2026 17:07:11 GMT60<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:28:38 GMT]]>@evacide wow. That's truly awful.

Thank you for bringing this up and sharing it.

]]>https://forum.fedi.dk/post/https://sunny.garden/users/dacmot/statuses/117412129598193102https://forum.fedi.dk/post/https://sunny.garden/users/dacmot/statuses/117412129598193102Fri, 09 Oct 2026 17:28:38 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:27:48 GMT]]>@evacide given the source I can only assume the process is, "ask a LLM".

]]>https://forum.fedi.dk/post/https://mastodon.gamedev.place/users/kevingranade/statuses/117412126295167367https://forum.fedi.dk/post/https://mastodon.gamedev.place/users/kevingranade/statuses/117412126295167367Fri, 09 Oct 2026 17:27:48 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:26:22 GMT]]>@kevingranade The "case by case basis" language suggests that they think human review is going to prevent them from sending the vuln report to a bad actor. I am much less confident in their abilities.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/evacide/statuses/117412120676728302https://forum.fedi.dk/post/https://hachyderm.io/users/evacide/statuses/117412120676728302Fri, 09 Oct 2026 17:26:22 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:24:58 GMT]]>@evacide
You seriously believe they are not doing in on purpose?

]]>https://forum.fedi.dk/post/https://mastodon.xyz/users/DataKnightmare/statuses/117412115167981062https://forum.fedi.dk/post/https://mastodon.xyz/users/DataKnightmare/statuses/117412115167981062Fri, 09 Oct 2026 17:24:58 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:24:28 GMT]]>@evacide a quick glance over the information they publish shows NO checks that the submitter is actually a "core contributor". It very much looks like the only filtering they care about is prestige.

]]>https://forum.fedi.dk/post/https://mastodon.gamedev.place/users/kevingranade/statuses/117412113189878374https://forum.fedi.dk/post/https://mastodon.gamedev.place/users/kevingranade/statuses/117412113189878374Fri, 09 Oct 2026 17:24:28 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:24:25 GMT]]>@evacide @bagder Are we sure that you can’t sign up somebody else’s project?

]]>https://forum.fedi.dk/post/https://piaille.fr/users/benjamingeer/statuses/117412113015973123https://forum.fedi.dk/post/https://piaille.fr/users/benjamingeer/statuses/117412113015973123Fri, 09 Oct 2026 17:24:25 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:20:09 GMT]]>@bagder Because your options are "more reports than you can possibly triage" or "someone finds a.vuln and either exploits it or sells it to bad people."

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/evacide/statuses/117412096210524836https://forum.fedi.dk/post/https://hachyderm.io/users/evacide/statuses/117412096210524836Fri, 09 Oct 2026 17:20:09 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:18:37 GMT]]>@evacide but if a project doesn't want the reports, why would they opt in for them?

]]>https://forum.fedi.dk/post/https://mastodon.social/users/bagder/statuses/117412090162099225https://forum.fedi.dk/post/https://mastodon.social/users/bagder/statuses/117412090162099225Fri, 09 Oct 2026 17:18:37 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:16:20 GMT]]>@evacide I'm having one of those things.... a headache with pictures! An idea!

Generate a metric shitton of slop code, upload it all to Github, and opt it all into this nonsense.

I am all about driving up costs to these digital laudanum peddling con artists.

]]>https://forum.fedi.dk/post/https://mastodon.bsd.cafe/users/nuintari/statuses/117412081191954030https://forum.fedi.dk/post/https://mastodon.bsd.cafe/users/nuintari/statuses/117412081191954030Fri, 09 Oct 2026 17:16:20 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:11:25 GMT]]>@evacide I don't think they think that. So much cluelessness seems highly unlikely, after all.

]]>https://forum.fedi.dk/post/https://social.finkhaeuser.de/users/jens/statuses/117412061859808046https://forum.fedi.dk/post/https://social.finkhaeuser.de/users/jens/statuses/117412061859808046Fri, 09 Oct 2026 17:11:25 GMT<![CDATA[Reply to I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying. on Fri, 09 Oct 2026 17:09:01 GMT]]>@evacide techbros have no fucking clue. For them open source projects are just lines in the sbom.

]]>https://forum.fedi.dk/post/https://chaos.social/users/f4grx/statuses/117412052439491014https://forum.fedi.dk/post/https://chaos.social/users/f4grx/statuses/117412052439491014Fri, 09 Oct 2026 17:09:01 GMT