Maybe we’ll see a (new) distro with AI assisted maintainers. That would be an interesting experiment.
Unfortunately one caveat would be it will be difficult to separate the maintainers from the financial incentives, so it won’t be a fair comparison. (e.g. the labs funding full time maintainers with salaries and donations that other distros can only dream of)
There are reasonable ethical concerns one may have with AI (around data center impacts on communities, and the labor used to SFT and RLHF them), but these aren't:
> Commercial AI projects are frequently indulging in blatant copyright violations to train their models.
I thought we (FOSS) were anti copyright?
> Their operations are causing concerns about the huge use of energy and water.
This is massively overblown. If they'd specifically said that their concerns were around the concentrated impact of energy and water usage on specific communities, fine, but then you'd have to have ethical concerns about a lot of other tech including video streaming; but the overall energy and water usage of AI contributed to by the actual individual use of AI to, for instance, generate a PR, is completely negligible on the scale of tech products.
> The advertising and use of AI models has caused a significant harm to employees and reduction of service quality.
Is this talking about automation? You know what else automated employees and can often reduce service quality? Software.
> LLMs have been empowering all kinds of spam and scam efforts.
Perhaps the most telling portion of their decision is:
Quality concerns. Popular LLMs are really great at
generating plausibly looking, but meaningless content. They
are capable of providing good assistance if you are careful
enough, but we can't really rely on that. At this point,
they pose both the risk of lowering the quality of Gentoo
projects, and of requiring an unfair human effort from
developers and users to review contributions and detect the
mistakes resulting from the use of AI.
The first non-title sentence is the most notable to consider, with the rest providing reasoning difficult to refute.
There was a time that I used Gentoo, and may again one day, but for the past N years, I’ve not had time to compile everything from source, and compiling from source is a false sense of security, since you still don’t know what’s been compromised (it could be the compiler, etc.), and few have the time or expertise to adequately review all of the code.
It can be a waste of energy and time to compile everything from source for standard hardware.
But, when I’m retired, maybe I’ll use it again just for the heck of it. And I’m glad that Gentoo exists.
> I’ve not had time to compile everything from source,
Then use the official binary packages?
> and compiling from source is a false sense of security, since you still don’t know what’s been compromised (it could be the compiler, etc.), and few have the time or expertise to adequately review all of the code.
That would still leave you in a strictly better position, surely? Any other distro would pull the same code and build with compilers, so that attack surface exists regardless.
This is a prime example of poor AI policy. It doesn't define what AI is – is using Google translate in order to engage on their mailing lists allowed? Is using Intellisense-like tools that we've had for decades allowed? The rationale is also poor, citing concerns that can be applied far more widely than just LLMs. The ethical concerns are pretty hand-wavy, I'm pretty sure email is used to empower spam and yet I suspect Gentoo have no problem using email.
The end result is not necessarily a bad one, and I think reasonable for a project like Gentoo to go for, but the policy could be stated in a much better way.
For example: thou shalt only contribute code that is unencumbered by copyright issues, contributions must be of a high quality and repeated attempts to submit poor quality contributions may result in new contributions not being reviewed/accepted. As for the ethical concerns, they could just take a position by buying infrastructure from companies that align with their ethics, or not accepting corporate donations (time or money) from companies that they disagree with.
> Ethical concerns. The business side of AI boom is creating serious ethical concerns. Among them:
Commercial AI projects are frequently indulging in blatant copyright violations to train their models.
Their operations are causing concerns about the huge use of energy and water.
The advertising and use of AI models has caused a significant harm to employees and reduction of service quality.
LLMs have been empowering all kinds of spam and scam efforts.
Highly disingenuous. First, AI being trained on copyrighted data is considered fair use because it transforms the underlying data rather than distribute it as is. Though I have to agree that this is the relatively strongest ethical claim to stop using AI but stands weak if looked at on the whole.
The fact that they mentioned "energy and water use" should tell you that they are really looking for reasons to disparage AI. AI doesn't use any more water or energy than any other tool. An hour of Netflix uses same energy as more than 100 GPT questions. A single 10 hour flight (per person*) emits as much as around 100k GPT prompts.
It is strange that one would repeat the same nonsense about AI without primary motive being ideological.
"The advertising and use of AI models has caused a significant harm to employees and reduction of service quality." this is just a shoddy opinion at this point.
To be clear - I understand why they might ban AI for code submissions. It reduces the barrier significantly and increases the noise. But the reasoning is motivated from a wrong place.
Posted April 2024. I wonder how they feel about this now. Or will next year. Claude Code wouldn’t exist for another year when this was posted. Nevermind Codex. It’s already awkward. Within 12 months it will be cringeworthy.
This might get me in trouble, but with all the negativity I’m seeing here I’ve got to ask.
Why do you care? Their sandbox their rules, and if you care because you want to contribute you’re still free to do so. Unless you’re an LLM I guess, but the rest of us should have no problem.
The negativity just seems overblown. More power to them, and if this was a bad call they’ll revisit it.
Every time I encounter these kinds of policy, I can't help but wonder how these policies would be enforced: The people who are considerate enough to abide by these policies, are the ones who would have "cared" about the code qualities and stuff like that, so the policy is a moot point for these kinds of people. OTOH, the people who recklessly spam "contributions" generated from LLMs, by their very nature, would not respect these policies in very high likelihood. For me it's like telling bullies to don't bully.
By the way, I'm in no way against these kinds of policy: I've seen what happened to curl, and I think it's fully in their rights to outright ban any usage of LLMs. I'm just concerned about the enforceability of these policies.
I don't understand this anti-AI stance. Either the code works and is useful, and it should be accepted, or it doesn't work and it should be rejected. Does it really matter who wrote it?
To be fair, any of their 3 objections are absolutely not exclusive to AI, but can be levied against any human contribution as well.
Any contributer, wether openly using AI or covertly, should be reputed by earned merit of the contribution history.
Yes, I know there are still holdouts that realy do not use AI, but that number is shrinking rapidly. A no AI policy when strictly enforced (how?) would probably just lead to project EoL.
I wonder how would they enforce it. If they let a pure LLM Commit into their codebase, then there are a lot of another commit that depends on it, would they remove it and try to submit another commit to replace it, or just let it be ?
It is interesting that so many people are upset about this policy. If "AI" actually worked, you could plagiarize the whole of Gentoo in one hour.
But no, you always have to infiltrate and harass existing projects, because without the actual human developers your poor "AI" "contributions" are nothing.
22 comments
[ 6.2 ms ] story [ 41.9 ms ] threadUnfortunately one caveat would be it will be difficult to separate the maintainers from the financial incentives, so it won’t be a fair comparison. (e.g. the labs funding full time maintainers with salaries and donations that other distros can only dream of)
> Commercial AI projects are frequently indulging in blatant copyright violations to train their models.
I thought we (FOSS) were anti copyright?
> Their operations are causing concerns about the huge use of energy and water.
This is massively overblown. If they'd specifically said that their concerns were around the concentrated impact of energy and water usage on specific communities, fine, but then you'd have to have ethical concerns about a lot of other tech including video streaming; but the overall energy and water usage of AI contributed to by the actual individual use of AI to, for instance, generate a PR, is completely negligible on the scale of tech products.
> The advertising and use of AI models has caused a significant harm to employees and reduction of service quality.
Is this talking about automation? You know what else automated employees and can often reduce service quality? Software.
> LLMs have been empowering all kinds of spam and scam efforts.
So did email.
I’d be curious how much energy gentoo consumes versus a binary distro.
There was a time that I used Gentoo, and may again one day, but for the past N years, I’ve not had time to compile everything from source, and compiling from source is a false sense of security, since you still don’t know what’s been compromised (it could be the compiler, etc.), and few have the time or expertise to adequately review all of the code.
It can be a waste of energy and time to compile everything from source for standard hardware.
But, when I’m retired, maybe I’ll use it again just for the heck of it. And I’m glad that Gentoo exists.
Then use the official binary packages?
> and compiling from source is a false sense of security, since you still don’t know what’s been compromised (it could be the compiler, etc.), and few have the time or expertise to adequately review all of the code.
That would still leave you in a strictly better position, surely? Any other distro would pull the same code and build with compilers, so that attack surface exists regardless.
The end result is not necessarily a bad one, and I think reasonable for a project like Gentoo to go for, but the policy could be stated in a much better way.
For example: thou shalt only contribute code that is unencumbered by copyright issues, contributions must be of a high quality and repeated attempts to submit poor quality contributions may result in new contributions not being reviewed/accepted. As for the ethical concerns, they could just take a position by buying infrastructure from companies that align with their ethics, or not accepting corporate donations (time or money) from companies that they disagree with.
Highly disingenuous. First, AI being trained on copyrighted data is considered fair use because it transforms the underlying data rather than distribute it as is. Though I have to agree that this is the relatively strongest ethical claim to stop using AI but stands weak if looked at on the whole.
The fact that they mentioned "energy and water use" should tell you that they are really looking for reasons to disparage AI. AI doesn't use any more water or energy than any other tool. An hour of Netflix uses same energy as more than 100 GPT questions. A single 10 hour flight (per person*) emits as much as around 100k GPT prompts. It is strange that one would repeat the same nonsense about AI without primary motive being ideological.
"The advertising and use of AI models has caused a significant harm to employees and reduction of service quality." this is just a shoddy opinion at this point.
To be clear - I understand why they might ban AI for code submissions. It reduces the barrier significantly and increases the noise. But the reasoning is motivated from a wrong place.
Why do you care? Their sandbox their rules, and if you care because you want to contribute you’re still free to do so. Unless you’re an LLM I guess, but the rest of us should have no problem.
The negativity just seems overblown. More power to them, and if this was a bad call they’ll revisit it.
By the way, I'm in no way against these kinds of policy: I've seen what happened to curl, and I think it's fully in their rights to outright ban any usage of LLMs. I'm just concerned about the enforceability of these policies.
My perspective is that this criticism is only valid for “single-shot in spirit” / “prompt and forget” LLM powered contributions.
Any contributer, wether openly using AI or covertly, should be reputed by earned merit of the contribution history.
Yes, I know there are still holdouts that realy do not use AI, but that number is shrinking rapidly. A no AI policy when strictly enforced (how?) would probably just lead to project EoL.
But no, you always have to infiltrate and harass existing projects, because without the actual human developers your poor "AI" "contributions" are nothing.