this post was submitted on 10 Sep 2026
152 points (88.0% liked)

Technology

87956 readers
2884 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
 

GrapheneOS is currently defending its use of AI coding tools on Mastodon against complaints by various accounts claiming to be users.

We do not understand where you're coming from or why you're so incredibly angry with us. It's not justified and does not make sense.

top 50 comments
sorted by: hot top controversial new old
[–] chewypoops@lemmy.world 2 points 1 hour ago

There really is a difference between AI-assisted coding and vibe coding, and I don't know enough about actually coding to look at their repos and tell you what's happening.

[–] RabbitBBQ@lemmy.world -1 points 1 hour ago (1 children)

Sooner than later most things the average person does will sort of be vibe coded like compiling to an intermediate language. The idea of apps and walled gardens will not be as important. Instead of approved apps, it will be approved models and agents. Even the idea of an operating system is going to change. Linux is a great space for integrating the computing environment with AI coding. The full source is available to the model and any change you ask it to make can just be done for you. The idea of running a "Linux" or "Windows" could be limited to certain software and domains.

[–] mirshafie@europe.pub 2 points 57 minutes ago

I think that certain things will be fairly resistant to forking, even by AI. Foundational software like the kernel, compilers, basic tools, databases, and so on will likely benefit more from being used as the standard/vanilla version rather than a modded version (especially a vibe-modded one).

But people and companies will experiment with this for sure and it wouldn't surprise me if some of the less software-competent hardware companies start making their Linux forks or drivers with LLMs, at least for a couple of years in the near future.

I also think that this will shift lots of companies further away from GPL toward MIT/BSD, because they'll want a fully moddable source but they won't want to share what they're vibecoding.

[–] hirihit640@sh.itjust.works 4 points 4 hours ago (1 children)

Reading the comments, wow AI is polarizing. Neither side will budge.

I guess only time will tell, to see if all the AI code will actually come crashing down.

[–] MangoCats@feddit.it 6 points 2 hours ago (1 children)

Non AI code has been crashing down for decades, controlled chaos, continuous improvement. We have lots of tools to put metrics on that, and AI assisted code is fairly well crushing those metrics. It's not 100% self sufficient code creation Nirvana, but it might be fairly compared to the Cotton Gin in terms of making the field workers more productive in the delivery of market ready code/cotton.

[–] HaraldvonBlauzahn@feddit.org 0 points 1 hour ago

We have lots of tools to put metrics on that, and AI assisted code is fairly well crushing those metrics.

You mean more lines of code?

[–] uszo165@futurology.today 6 points 7 hours ago (2 children)

If it was about real AI – not stochastic parrots – I would be all for it. What happened to those developments that started in the 70s where you have automatic formal proofs that a piece of code does what it is supposed to do? That is intelligent. Producing slop more voluminous and convoluted than humans could produce or understand is not intelligent software architecture just like fixing a hole in a roof by throwing what sticks at it is not intelligent building architecture. Both may do the job for some time. But what are the long-term costs and who is capable to clean up? In my opinion, what's most desired is tools that are bug free, do what they should without annoying the user, and are radically simplified in their architecture. (For example, I would be happy with a perfectly working product that does what NFS or Samba aspire and fail to do for decades.) Apparently, AI can't deliver that. To have the billionth app that is a browser wrapper and shows me exactly one website is much more important.

[–] MangoCats@feddit.it 1 points 2 hours ago

What happened to those developments that started in the 70s where you have automatic formal proofs that a piece of code does what it is supposed to do?

The stochastic parrots we have today are pretty good at doing that kind of tedious, extensive, franky mind numbingly boring stuff. They're also fast enough that you can "afford" to take the time / effort required to do those kinds of proofs where they are warranted - it makes them "a good idea" in a lot more places than they used to be when they were so much more expensive to perform.

[–] DudeImMacGyver@kbin.earth 43 points 13 hours ago (2 children)

If they're just using it to find and patch bugs/exploits? Fine by me.

Vibe coding? Get the fuck outta here.

[–] MangoCats@feddit.it 3 points 2 hours ago

If Vibe coding means people who don't know how to code creating code... yeah, that's kind of like giving people who don't know how to paint an airless gun and 5 gallon bucket and telling 'em to go for it on this building here...

[–] 0x4f1@lemmy.world 25 points 13 hours ago* (last edited 13 hours ago) (3 children)

This is the key point.

From my reading that is not the limit in how they are using AI. It seems like they are accepting LLM generated code as inputs.

This pretty much compromises the whole project as far as I am concerned.

[–] matlag@sh.itjust.works 1 points 1 hour ago

Based on my understanding, the "core" team uses AI to detect vulnerabilities.

They also take codes from paid third party devs, and they say they don't mind how they wrote the code, but it must be clear and each contributor needs to be able to explain it.

They follow the same rules on code conventions including readability. So basically, it's less that they accept it than they don't care as long as it matches their quality expectations. If you can't tell, you can't ban...

[–] verily@lemmy.dbzer0.com 10 points 8 hours ago (1 children)

Considering Graphene's entire reputation is staked on extremely precise definitions of security, this is a little concerning.

They're the best. If the best degrades, I don't foresee some Graphene alternative stepping up very quickly (see also: cross-platform alternatives to Google-made Chromium and Google-funded Gecko)

[–] 9488fcea02a9@sh.itjust.works 1 points 2 hours ago* (last edited 2 hours ago)

is the linux kernel "the best"? because they are using AI tooling. Linus actually threatened to use LLM to maintain sparse if nobody stepped up..

is curl the best? because the creator of curl has also used/accepted LLM code...

if the creators of two of "the best" pieces of software ever made are accepting (NOT embracing or promoting... just accepting) LLM code.... maybe it's time for us to think about the possibility that this MIGHT be a useful tool instead of everyone just yelling "SLOP SLOP SLOP" everywhere.......

load more comments (1 replies)
[–] VykeTheGreat@anarchist.nexus 80 points 15 hours ago (7 children)

I haven't dug into the code, but blanket hate for AI in code is extremely frustrating. There's a difference between vibe coding and the hundred other ways to "use AI" on a project.

[–] HaraldvonBlauzahn@feddit.org 1 points 1 hour ago

There’s a difference between vibe coding and the hundred other ways to “use AI” on a project.

I am not talking about the Linux kernel or the Rust project - they have stabdards way above average commercial projects - but generally "using ai" in practice means to use it for code generation. Then, programmers are expected to review the output but are not given extra time for it. This creates an extremely slippery slope leading to mostly unsupervised code creation. Also because reading and understanding buggy third party code means more effort than writing new code.

Then there is the idea to get rid of the bugs by "debugging", but debugging is frankly not a software engineering strategy, because you can always just recognize a fraction of the bugs that your process created in the first place. Debugging is also more expensive tha writing good code.

Then, what makes the process between product managers and software developers very often a bit friction-loaded is that good developers always want to have clear specifications what they are supposed to build.

LLM code generation largely replaces clear specifications with plausible assumptions. That appears to make the process fast, but the result is often wrong. At times obviously wrong, and at times subtly and catastrophically wrong.

[–] Grimy@lemmy.world 28 points 14 hours ago (2 children)

It's funny because anyone seeing this as black and white clearly hasn't ever opened an IDE.

[–] SuspiciousCarrot78@aussie.zone 1 points 2 hours ago* (last edited 1 hour ago) (1 children)

Ssshh…Most of those having a knee-jerk "AI BAD! YOU BAD!" reaction don't have any clue WTF an IDE is, how code completion works, nor the fact that by most metrics 95%+ of code now has "AI" in the chain…and has had that for YEARS.

https://github.blog/news-insights/research/survey-ai-wave-grows/

https://survey.stackoverflow.co/2025/ai

OMGWTFBBQ!

Here's a crazy idea…how about instead of "AI BAD! ME HATE AI" how about some nuance? Assume ALL software in 2026 has had AI assistance, and review it on its merits.

As for the devs at GrapheneOS directly…why were you (the general you) trusting them before? Humans can be plenty dicey in ways that affect code all on their own.

https://www.reddit.com/r/PrivacyGuides/comments/13s7mv3/why_i_deleted_grapheneos_louis_rossmann/

https://factually.co/fact-checks/technology/louis-grossman-grapheneos-drama-c1f2ae

Supposedly wonderful "human artisanal code" has plenty of fuckery.

https://en.wikipedia.org/wiki/XZ_Utils_backdoor

https://thehackernews.com/2024/03/urgent-secret-backdoor-found-in-xz.html

https://simonwillison.net/2026/Mar/31/supply-chain-attack-on-axios/

https://www.hivepro.com/threat-advisory/axios-npm-supply-chain-attack-what-you-need-to-know/

[–] HaraldvonBlauzahn@feddit.org 1 points 1 hour ago (1 children)

Supposedly wonderful “human artisanal code” has plenty of fuckery.

These are supply chain attacks and in the case of xz utils, the attacker had gone to extreme lenghts to hide the attack from a well-meaning, good-hearthed but overworked and burnt out solo maintainer.

To compare this to bugs that people unwittingly introduce in normal human-written code is not sincere.

[–] SuspiciousCarrot78@aussie.zone 1 points 42 minutes ago* (last edited 41 minutes ago)

Very well. Here -

https://www.debian.org/security/2008/dsa-1571

https://www.finnie.org/2024/05/13/i-discovered-the-debian-openssl-bug/

That's the thing about "pure human slop": it doesn't need to be malicious to be catastrophic.

The second link is particularly salient - kills the "supply chain attacks are special" argument because it is precisely about "unwitting bugs in normal human-written code just happen"

[–] AVincentInSpace@pawb.social 36 points 12 hours ago* (last edited 11 hours ago) (11 children)

I've been a programmer for two thirds of my life up to this point. I don't see how the machine that generates code that must be assumed to be broken, and statements about said code that must be assumed to be wrong, until both have been manually verified, because the "hallucination" issue is inherent to the design of LLMs and cannot be solved, is supposed to make my life easier. Especially since a well known problem in computer science is that writing code is more fun than reading it.

If you're using AI for code generation, I hope you like reading code.

If you're using AI to learn a repo, I hope you're prepared to fact check everything it tells you.

If you're using AI for code review before merging a PR, fucking yikes. What made you think the sycophant machine that once told users a soggy cereal bar was a great business opportunity and cannot even transcribe McDonald's orders correctly was suitable for that purpose?

If you're telling yourself it's okay because there's a human in the loop, please read some studies about decision fatigue and consider that increasing the number of critical decisions a person must make per day, while giving them a suggested answer that's right 90% of the time and catastrophically wrong the remaining 10%, and the only way to tell the difference is to read in depth, might not have the desired effect. Especially if the human in question is then put under time pressure.

And all that is before I go on a five paragraph rant about the ethical transgressions of every major AI company.

It's pretty black and white for me.

load more comments (11 replies)
load more comments (5 replies)
load more comments
view more: next ›