I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.
-
I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.
https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source
@evacide I don't think they think that. So much cluelessness seems highly unlikely, after all.
-
I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.
https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source
@evacide I'm having one of those things.... a headache with pictures! An idea!
Generate a metric shitton of slop code, upload it all to Github, and opt it all into this nonsense.
I am all about driving up costs to these digital laudanum peddling con artists.
-
I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.
https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source
@evacide but if a project doesn't want the reports, why would they opt in for them?
-
@evacide but if a project doesn't want the reports, why would they opt in for them?
@bagder Because your options are "more reports than you can possibly triage" or "someone finds a.vuln and either exploits it or sells it to bad people."
-
@bagder Because your options are "more reports than you can possibly triage" or "someone finds a.vuln and either exploits it or sells it to bad people."
-
I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.
https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source
@evacide a quick glance over the information they publish shows NO checks that the submitter is actually a "core contributor". It very much looks like the only filtering they care about is prestige.
-
I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.
https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source
@evacide
You seriously believe they are not doing in on purpose? -
@evacide a quick glance over the information they publish shows NO checks that the submitter is actually a "core contributor". It very much looks like the only filtering they care about is prestige.
@kevingranade The "case by case basis" language suggests that they think human review is going to prevent them from sending the vuln report to a bad actor. I am much less confident in their abilities.
-
@kevingranade The "case by case basis" language suggests that they think human review is going to prevent them from sending the vuln report to a bad actor. I am much less confident in their abilities.
@evacide given the source I can only assume the process is, "ask a LLM".
-
I understand that Anthropic thinks they're doing open source projects a favor here, but what they're actually doing is creating an enormous amount of work for people that they are not paying.
https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source
@evacide wow. That's truly awful.
Thank you for bringing this up and sharing it.
-
J jwcph@helvede.net shared this topic
