Notices by Laíns ⚡🌈🇵🇸 (missingclara@chaos.social)

I needed to do some Windows development, so I tried setting up WSL. I ran the CLI command to install a distro, and all followup commands were erroring out saying the distro wasn't installed. the list command didn't show anything either. when I re-ran the install command, it would tell me that it *was* installed... well, apparently there's an initial setup step that is needed to finalize the installation, and to run it you need to launch the distro environment via the GUI 🙃

I swear Windows is the worst piece of software I have ever had the misfortune to interact with

@wombatpandaa @neil yeah, I see the value for attestation, as long as it's controlled by the user and not the phone manufacturers. like secure boot, TPM, etc.

@dalias @alwayscurious @tnorinder that's the case in Python. due to corporate sponsorships the PSF has been able to hire 5 full time developers to work both CPython, and the Python infrastructure as a whole. these positions are directly sponsored, without any kind of editorial control, the only strings is that some of the positions are sponsored to work on a specific area (security, core development, etc.).

@xgranade @dalias I understand, but at least for Python in specific, the level of scrutiny put on contributions is greater than the kind of issues you are mentioning. if these contributions are being accepted, it is because it was practical to review contributions that made use of LLMs, if that starts not being the case, they will stop being accepted. that said, I still disagree with it on an ethical level.

@dalias @xgranade if it's truly slop, I won't even review it. if it is a thoughtful contribution that happened to (responsibly) use LLMs somewhere in the development process, I will. if the error rate does start becoming a problem, I will probably stop accepting such contributions altogether.

@dalias @xgranade yeah but I am not merging without going through the same mental processes myself, I have to understand the code I am merging

@dalias @xgranade I can concede of the provenance and licensing, but on the last point, that can also be true from regular user contributions. to be a good maintainer you need to be able catch those errors, so it doesn't matter if it comes from a real user or a LLM. especially in a project like Python, where the smallest thing can break a lot of code downstream.

@dalias @xgranade we already ban those slop spammers. that leaves reasonable contributors, but no it isn't a good argument. some highly knowledgeable folks that I know are experimenting using LLMs as a tool with success, while I dislike it due to ethical reasons, there is no objective technical reason to reject those contributions.

@xgranade you shouldn't really be judging the code authors, but rather the maintainers. writing code is usually easier than reviewing it.

@xgranade I also dislike it, but the cat's out of the bag, even if it wasn't allowed people would still be using it, just without revealing it

@mjg59 @Infoseepage if your threat model is nation wide backdoors, this isn't really that different from the ASIC logic