• 1 Post
  • 132 Comments
Joined 1 year ago
cake
Cake day: September 22nd, 2025

help-circle






  • eleijeep@piefed.socialtoLinux@lemmy.ml•BSOD
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    16 days ago

    Oh I see. If the URL puts the sensitive information after the anchor, like https://example.com/bsod#sensitive-info-goes-here then the browser would never send that part to the server. Everything after the anchor is just used locally by the browser to scroll the page to a specific place (or in this case for the javascript to read and process).

    You’d need to check every time you scan a QR code though that the # is in the URL and it’s not malformed. Trivially replacing the # with a ? would turn the private URL into one that sends all the data in the GET request. It’s training users to do something risky.

    Oh and it also assumes that the javascript hasn’t been tampered with to upload the data somewhere.

    I don’t like it.












  • sloppers can just keep burning new accounts (as long as they have access to new IP addresses) while real developers deserving of praise and reputation thrive.

    Becoming a Debian developer requires you to meet an existing Debian developer in person and have your public key signed by them. It’s not possible to keep burning new accounts unless you go and meet a different Debian developer each time and there’s a limited number of them in each region and they usually meet together, so more than one person will see your face.



  • I disagree with your reading of the proposals. My interpretation was that only proposals (1) and (7) have severe limits on LLM use. Each of the other proposals allows LLM use with some very minor concessions or no concessions at all. It felt to me as though they were all worded very sneakily to try to attract votes from anti-AI developers while actually being very permissive, by waffling about the harms of AI in the preface before completely dropping the ball in the requirements section.

    Removing all of the waffle, the proposals can be boiled down to:

    1. Completely outlaws all use of LLMs in Debian contributions, whether code or documentation or communication etc.
    2. Allows any and all LLM use provided that:
    • the tools are not legally problematic
    • the LLM output does not violate another copyright
    • the contributor assumes full responsibility
    • they’re not used for bulk operations without prior discussion
    • private data is not sent to cloud services
    1. Allows LLM use for everything except for human-to-human communication. Also permits individual maintainers to ban LLM contributions to the project that they maintain (implying that maintainers may also permit LLM contributions to the project they maintain).
    • This one is particularly pernicious since it also “requests” (as in, a non-binding encouragement) that nobody uses LLMs, whilst acknowledging that for decision makers this “will involve uncomfortable compromises.”
    1. Allows any and all LLM use provided that the contributor takes full responsibility, tags the contribution as LLM-assisted, and doesn’t use cloud services for private data.
    2. Says absolutely nothing of substance. 8 paragraphs of waffle to place no restrictions on anything but to say that contributors are already bound by the Debian Social Contract and existing rules, and that they should be held responsible for their contributions accordingly.
    3. Exactly as (5), but this time 9 paragraphs of waffle to say nothing of substance.
    4. “In order to safeguard the project’s mutual understanding, trust and respect, we disallow the output of generative AI as direct contributions to Debian.”
    5. 12 paragraphs of hand wringing about the climate boils down to: “this text is just a position statement. This said however, we appreciate the disclosure of LLM usage.”

    So by my reading, that makes:

    • Bans AI: (1), (7)
    • Allows AI: (2), (4), (5), (6), (8)
    • Allows AI with a restriction: (3)

    Now read the titles of these proposals and their introductory preamble and ask yourself whether they are representative of the actual rules they will put into effect.

    https://lists.debian.org/debian-vote/2026/08/msg00352.html