How a hidden prompt injection in CONTRIBUTING.md revealed that 40% of pull requests to a popular GitHub repository were generated by AI bots
  • Wispy2891@lemmy.world
    1·
    2 days ago

    So, this guy maintains a repo that is 100% exclusively targeting ai bros (MCP servers), then does a shocked Pikachu face when the ai bros use ai bots to contribute to the ai slop??

  • bitjunkie@lemmy.world
    26·
    5 days ago

    can I make them do extra work that would make their contributions genuinely valuable?

    The worst-case scenario for this is that you make them do extra work that isn’t genuinely valuable, and it wastes their lazy devs’ tokens.

  • november@piefed.blahaj.zoneEnglish
    27·
    5 days ago

    What is MCP?
    MCP is an open protocol that enables AI models to securely interact with local and remote resources through standardized server implementations.

    Is this a different definition of AI than the slopbots we all know and love, or is this a case of poetic irony?

    • MalReynolds@slrpnk.netEnglish
      29·
      5 days ago

      MCP is for tool calling, the stochastic parrot matches something, say 133 x 8 / 7 as a math problem and instead of guessing wrong calls a calculator using good old deterministic code and gets a correct answer.

  • cloudskater@piefed.blahaj.zoneEnglish
    242·
    5 days ago

    So this person prompt injected to figure out which submissions were bots, found out, and instead of taking a firm stance against this practice they’re gonna… try and “make use” of all the bot submissions… sighhhhh oh my fucking God how many more times am I going to see these similar brain dead arguments? I can’t take it anymore.

  • Wiz@midwest.social
    5·
    4 days ago

    Unless we figure out how to evolve our processes – which includes being able to recognize and distinguish bot contributions – open-source maintenance is going to grind to a halt.

    I wish there was some sort of “trust network” where actual humans can say, “Yes, I know this contributor IRL, and vouch for them.” But that’s also a security problem. So, 🤷🏼