Rendered at 17:44:39 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
eugenekolo 3 hours ago [-]
Hobby groups projects like this are less fun for a lot of people who used to enjoy interacting with smart people. It's definitely become a game of just spam claude for answers with zero understanding or care for how anything actually works. That's fine to get things done and fine for a lot of side projects, but it definitely ruins the joy that people have in understanding systems and working with intellectuals.
aeonflux 2 hours ago [-]
> Hobby groups projects like this are less fun for a lot of people who used to enjoy interacting with smart people.
Same thing did happen to many work places. People at all levels proxy questions through LLMs and don't even bother to read/trim/edit the response.
Funny, how suddenly a tight, 1-2 sentence response on point is a sign of skill.
misterderpie 2 hours ago [-]
Wasn't there an article here, or was it under another HN post as a comment? Someone pointed out that the before the dawn of LLMs, "bad contributors" had a rate limiter of sorts. Now anyone can prompt their LLM and throw their output at you, shifting the burden entirely on the reviewer at highest possible speed.
PunchyHamster 2 hours ago [-]
It's so much worse than just that. Because they will also decide on how problem should be solved by prompting LLM and ask you to argument doing it any other way vs the LLM slop they pasted
Muromec 1 hours ago [-]
It which point you reject the PR and suggest them to maintain a fork themselves.
Brian_K_White 9 minutes ago [-]
I'd say don't bother suggesting anything.
Not as a rule for all prs you want to reject, but any time it seems to be no-effort pure ai. Both to waste as little of your own time and effort as possible, but also to to help make this activity not rewarding.
I wouldn't worry about false positives and being unfair. This is self defense and also community defense. Anyone legit will manage to get your attention. You'd be filtering not on any specific detail or rule but on simply "care". If a legit person fails to convince you that they are a human that cares, then that's just an unfortunate industrial accident. It's unfortunate but trying to do anything about it is worse.
Just this morning I had a senior manager say to me "I was trying to do someone else's job and give them all the info so they can review it as I have no knowledge" in response to me asking for them to please filter the Claude word salad using the meat proxy. I'm pretty tired of having to do the job of filtering the low-effort copy-paste walls of text
glaslong 2 hours ago [-]
Similar to sending a "Let Me Google That For You" except somehow because it was an LLM not Google, they've forgotten it's more insulting than helpful, and aren't even in on the joke they themselves are making.
ToucanLoucan 1 hours ago [-]
I mean I can't speak for everyone but in my mind, sending lmgtfy was not only always insulting, it was meant to be. It's saying "I know you have access to the tools you need to answer this question, why are you asking me, and here's some instructions on how you use this tool in the future so you don't need to be asking me foolish questions."
And while I generally believe we should be pro-social in our communications both with each other as software engineers and with others who don't know what we know, I think it's also fair game to point out that the thing being asked of you is commonly available knowledge. Google may suck as my sibling comment points out, and I agree, but filtering good info from info dumps, be that Claude or Google search, is a life skill that's more critical now than ever. And if you work in tech, really at any level, you know how to do that.
shevy-java 2 hours ago [-]
Well - the "let me google that for you" nowadays barely works, because google ruined the search engine. The search engine sucks now - and by default the first results are AI slop summaries that are IMO worthless.
2 hours ago [-]
whstl 2 hours ago [-]
I saw a product manager that used to do that, just ask developers to verify the Claude hallucination and placeholder numbers.
He got fired quite quickly after his boss realized it was all bullshit.
torginus 41 minutes ago [-]
I knew a manager that tried the exact same but in the GPT4 era :D He also got fired/left but as satisfying it would be to say that this was the cause of his demise I can't prove that.
lultimouomo 2 hours ago [-]
> Funny, how suddenly a tight, 1-2 sentence response on point is a sign of skill.
Wasn't it always?
DaSHacka 2 hours ago [-]
I agree, anecdotally I've always noticed a huge amount of my peers lacked professional communication skills even pre-LLMs.
A lot of people get this idea that "more verbosity = better" instead of optimizing for conciseness and information-density. I largely blame minimum word-count essays from school assignments.
finaard 2 hours ago [-]
Verbosity can be fine, but you'd want a simple enough text, with the verbosity separated. I still write emails with footnotes, and thanks to UTF-8 I now have all the numbers available.
Amusingly enough the advent of HTML-emails didn't produce any better formatted mails, despite the extra formatting options, than what you can do with a plain text email supported by a proper text editor.
Arubis 1 hours ago [-]
Verbosity is, among other things, a cover-your-ass move. Stating something simply requires cutting details that might matter sometimes. If your counterparty or experience has made this painful, you'll likely write more.
hluska 2 hours ago [-]
Would you like me to edit this mess for you? You’re way too verbose..
inanutshellus 2 hours ago [-]
"As brevity is the soul of wit, I shall be brief. [then bloviates on and on.]" ~Polonius
WD-42 2 hours ago [-]
I’d have written a shorter comment, but I didn’t have the time.
HPsquared 2 hours ago [-]
That's the essence of it, I suppose. Cheap walls of text.
Edit: although another quote comes to mind- "Quantity has a quality of its own."
SoftTalker 2 hours ago [-]
Was also a power signal, often demonstrated by execs who send three or four word replies to everything, often also in lower case with no punctuation.
senderista 1 hours ago [-]
sama tweets like this all the time, totally performative
Aurornis 2 hours ago [-]
Depends. A lot of the 1-2 sentence rapid responders from my past jobs weren’t really understanding the problem. They were virtue signaling that they were confident, fast to respond, and understood immediately (without elaborating)
It’s easy to send a pithy response that suggests experience and understanding without having either. Think of a middle manager spouting pithy buzzword laden cliches confidently in response to every request, then transferring the real problem to the grumbling employees who have to solve the actual hard parts of the problem which lie in the nuance.
senderista 1 hours ago [-]
This is a core problem of short-form social media (including HN): it’s easy to signal understanding or expertise without having to demonstrate it.
2 hours ago [-]
devin 2 hours ago [-]
I think a lot of workplaces would do well to ban LLM-based replies in certain spaces.
kjs3 1 hours ago [-]
While I don't disagree with you, they shouldn't have to. This should be one of those things like covering your mouth when you cough in a crowd and not playing loud music in your cube that people with basic social skills should know not to do. Unfortunately, like much basic courtesy, we apparently now have to make rules.
Arubis 1 hours ago [-]
This was already true (as sibling comments note) but it's _way_ sharper now. Even if you use an LLM to research or answer a question, editing it down for other people takes effort, and doing it well demonstrates understanding.
javcasas 2 hours ago [-]
Meat proxies. Artificially intelligent.
mathisfun123 2 hours ago [-]
> Funny, how suddenly a tight, 1-2 sentence response on point is a sign of skill.
Communicating well has always been a sign of skill. Talking to most devs was like pulling teeth even before LLMs.
eithed 2 hours ago [-]
That's why I tell my Claude to keep its responses short :V
In my hobby groups there has always been a second, smaller, more intimate invite-only space for people doing the deep work. It’s the only way to do the work in the age of 1000-member Discords where important conversations get lost in the scroll back instantly.
The experience in these spaces is largely the same. LLMs can be used there, too, but when the experts are using them with experience to back it up the results are a lot better.
The people who are really struggling in my few hobby groups (not PS5) are those who enjoyed some social status from their knowledge. They were heros and people sought them out and revered their work in 2023. LLMs came along and partially leveled the playing field. When a determined kid with a Deepseek subscription can produce a sloppy version of what took you years to find, that sense of being a heroic figure at the next level is gone.
I think this reveals another wrinkle, which is that the status hierarchy wasn’t that solid or worthwhile anyway. Outside of a few vocal people trying to enforce the status hierarchy, most people don’t care who releases their jailbreak or PS5 exploit. They just want it. Whoever gets it to them first becomes the new king.
This PS5 incident has some strange element where supposedly keeping the reveal secret for 2 more weeks would have changed something with the GTA6 release. There were also 3 people who found the same exploit independent and some large amount of money on the line for the first of them to report it. The person who reported it signed off to spend time with his dying mother, so can’t really fault them for doing the thing they earned according to the rules of the program.
ndiddy 54 minutes ago [-]
> This PS5 incident has some strange element where supposedly keeping the reveal secret for 2 more weeks would have changed something with the GTA6 release.
Well it's that GTA 6 comes out in mid-November, so he wanted to wait until then to release the exploit so people could legally run GTA 6 on their hacked PS5s. Disclosing the exploit before the release means that they'll patch it before GTA 6 comes out so this is no longer an option.
I think this is unrelated because it happened after theflow0's statement, but Sony just released a major PS5 update that significantly increases the PS5's security ahead of GTA 6's release. Apparently it's impossible to rip games now without a hypervisor exploit, and since the last one just got reported to Sony this means that even people with hacked PS5s on old firmwares won't be able to pirate GTA 6 because nobody will be able to rip it. https://www.reddit.com/r/PS5_Jailbreak/comments/1wi0gpx/its_...
BrtByte 2 hours ago [-]
The status thing is probably part of it, but I'm not sure "a kid with Deepseek can make a sloppy version" actually shows that the old hierarchy was meaningless.
Aurornis 1 hours ago [-]
I meant that it was a slight illusion. These hierarchies can flip overnight when someone new enters the scene and delivers the thing the community wants.
An old guard always tries to enforce an ordering of respect based on seniority and who they think has earned it the most. Outside of a terminally online circle of Discord users few people care. They only want the thing so they can use it.
LLMs are a big disruption because now because effort and results have never been more uncoupled. When a kid with an LLM can do a sloppy but good enough version of the work in 1/100th of the time with 1/100th of the experience, the social hierarchy only matters to people who value it above the outcome itself.
hypfer 2 hours ago [-]
> Outside of a few vocal people trying to enforce the status hierarchy, most people don’t care who releases their jailbreak or PS5 exploit. They just want it. Whoever gets it to them first becomes the new king.
"Commodification" might be a relevant word here.
You can fight that by "building a personal brand", but then you're suddenly brand building instead of hacking, and hacking was what you actually wanted to do.
I guess it works best if you're not in it for clout but because you want something to exist. But even then it is difficult.
> There were also 3 people who found the same exploit independent and some large amount of money on the line for the first of them to report it.
Ah yes, game theory. Oof.
hypfer 2 hours ago [-]
> Hobby groups projects like this are less fun for a lot of people who used to enjoy interacting with smart people
It is insane just how miserable the experience of FOSS hardware hacking in public is.
The expectation does not even the slightest match reality.
You'd think "ah yes many eyes meaning all bugs get shallow", but instead you get worst of XDA-Developers and toxic wastelands where no sane person even answers anymore.
But this predates LLMs and was as miserable as it is now before as well.
In fact, I might even argue that LLMs made this _better_, because you can now avoid the "opening up in hopes of finding 1 helpful person below 99 annoying ones" through simple GPU compute.
Previously, you had to hope that through this self-inflicted horror, you'd find an expert that can augment you. Now that expert rests on huggingface.
It's still.. not perfect, of course. But it might be less miserable - provided that you adapt to the current state of things and stop with the "trawling for volunteers".
__
Of course, this does not help you against "skids let claude find bugs that you'd need and burn it for no reason" as per the twitter thread, but I wouldn't rule out that they would not have done that, if less information was public.
And.. that too was an issue before LLMs.
Information wants to be free, but so does your cat, and your cat gets run over by some crackhead in a 30 year old rusty pickup if you just put it outside without thinking.
So don't let it go out unattended.
That said, this "pep talk" is more directed at myself than at poor Andy.
This must all suck big time.
concinds 57 minutes ago [-]
It's the oldest unsolved problem of the internet: how to attract high-value people and keep out low-value contributors.
casey2 43 minutes ago [-]
Isn't the problem just that open source, by it's very nature, is low quality since it comes from the unix-like ecosystem where everything is built atop everything else. So inevitably when the skid comes to you with a bug you can say "ah that's a bug in a specific build of your shell with these environment variables, myyyy code is clean as a whistle, minimal, and follows best practices" (if we ignore that in practice it depends on a billion different programs versions all of which are incorrect)
Complaining about the inevitable toxic noise when the same boneheaded development decisions are made over and over like everyone has gone insane. You don't have to build a death trap on the land your cat and children roam.
hypfer 35 minutes ago [-]
Yes, yes indeed.
Just like humans by their very nature are low quality, since they come from the biology ecosystem, where everything is built atop everything else.
Filthy carbon-based mammals.
generalizations 2 hours ago [-]
Projects like this probably need a dedicated noob-fork where 'anything goes', so the noobs feel like they're contributing but where their blast radius is contained.
And once in a blue moon something good comes out of it back to the real project.
sc68cal 2 hours ago [-]
With how verbose LLMs are and how much code churn they generate, it will be very difficult to extract anything and apply it back upstream
IAmBroom 43 minutes ago [-]
The fence around the sandbox is the important part.
Cherrypicking the occasional winner is just a side benefit.
BrtByte 2 hours ago [-]
For a hobby community, getting to the answer isn't necessarily the main value
tristor 2 hours ago [-]
> Hobby groups projects like this are less fun for a lot of people who used to enjoy interacting with smart people.
This is definitely the case for me. Before AI tools became mainstream, it was already a difficult proposition to find other smart people who you could get along with and talk to, do something interesting together. The Internet made all the difference in my life because I was able to get outside my geographic region to do big things through open source and hacker communities. Now, that very important filter mechanism no longer works. It's Eternal September all over again. In a way, it's very much a domination of "ends" over "means" in the wider community that is being forced upon those who long focused on "means". For a lot of intelligent people, understanding something is /valuable on its own/, but for the wider world there is no value in simply knowing things, but what you do with that knowledge (or now that lack of knowledge). I even experienced this recently at DEFCON 34 where I saw other participants in some of the CTFs with me using AI tools and not really understanding what the tools were doing or what was happening, but just kind of bruteforcing/tokenmaxxing their way through. This isn't to say that those AI tools are fundamentally a bad thing to use in building open source software, security research, or even as a tool in a CTF, but that the "understanding" step needs to still be present or it destroys the fun in everything.
I'm certainly not having as much fun with computers these days, even as I've invested a lot of effort myself in local LLMs and trying to understand the tools and understand how to apply them reasonably, I've found I prefer much more analog entertainments. Thankfully there's always photography and lockpicking to entertain me at the moment and provide a pathway to meet other interesting fellows.
2 hours ago [-]
grey-area 2 hours ago [-]
It is not fine.
vouaobrasil 3 hours ago [-]
In general, society is experience a decoupling of fun from work. I can't say I enjoy every aspect of my job, but it's nice to enjoy some of it, and lots of people do find a lot of their job at least somewhat rewarding.
People who hate their job of course like to come out of the woodwork and say no one should enjoy it, but isn't it nice to have a society where at least some people can enjoy their work? I used to enjoy teaching but I'd never get a teaching job now because of how AI is being used in that sector.
Technophiles will say that we should embrace the future because its inevitable but how many good people quitting does it take before they realize that a vibe-coded future of fun isn't all there is to life?
vjvjvjvjghv 1 hours ago [-]
Us techies have taken the fun out of a lot of professions with the tools we are developing and selling. I guess it was only a matter of time until we killed the fun in our profession.
p-e-w 2 hours ago [-]
> but isn't it nice to have a society where at least some people can enjoy their work?
That’s an interesting question. I thought about it for a minute and was surprised that I came to the conclusion that the answer isn’t obviously “yes”.
An analogous question is “isn't it nice to have a society where at least some people are rich?”, and I think that question should make it clearer to many people why that is so.
latexr 2 hours ago [-]
> An analogous question is “isn't it nice to have a society where at least some people are rich?”
There’s a crucial difference between the two questions. “Rich” is a relative term: If everyone had the same amount of money, no one would be rich, you need someone to be worse off (poor) to have someone better off (rich). But someone enjoying their work has no bearing on someone else’s enjoyment of theirs.
CamperBob2 2 hours ago [-]
you need someone to be worse off (poor) to have someone better off (rich).
The fact that so many people believe this is what bums me out.
You need to understand something: the people who want you to think this way do not have your best interests in mind, any more than the rabid right-wing Trumpers do.
latexr 2 hours ago [-]
You completely misunderstood the point.
In no way do I mean that someone has to suffer for someone else to thrive. We could (and should) all thrive and have our needs met.
I’m just saying the term is relative, like “tall” and “short”. If we were all the same height, no one would be tall or short, we’d just be. If we all had the same amount of money, no one would be rich or poor.
CamperBob2 1 hours ago [-]
An economy isn't a zero-sum game. Wealth doesn't just pop into existence when someone in the government clicks a button on a screen. Money is created that way, but wealth isn't. It has to be created by creating something that someone else values enough to pay for willingly.
No one has to lose anything, in the sense that no one has to give up more than they think the product or service is worth to them. In your example, it's possible for everyone to grow taller.
latexr 1 hours ago [-]
> No one has to lose anything
For the third time, that is not the argument. Read what I wrote and try to steal man a bit. Get your preconceived argument out of your head and understand we are in agreement. The difference between wealth and money isn’t in question, that is something you just added to the argument and decided with zero basis that I disagree.
The fact that so many people jump to conclusions and immediately dunk on others who agree with them is what bums me out.
What a waste of a conversation. Why are you spending time criticising those who support the same points?
CamperBob2 1 hours ago [-]
What a waste of a conversation. Why are you spending time criticising those who support the same points?
All I know is what you wrote, sorry. Same shit we could all read on Reddit: "If everyone had the same amount of money, no one would be rich, you need someone to be worse off (poor) to have someone better off (rich)."
If you frequently find yourself misunderstood in this way, work on expressing yourself more clearly.
GuinansEyebrows 2 hours ago [-]
completely different world, but i've seen this happen in music spaces as well.
the idea of gatekeeping is often seen as elitist or exclusionary (fairly enough in many cases) but i think this can be an exaggerated description of a culture that necessarily requires a standard of... let's say, desire to engage with material on a sufficiently deep level. many things can be for anybody, but they are not for everybody.
in the past i've seen the phenomenon of "opening up" subcultures or previously-niche intellectual/art fields described as democratization but i think that ignores a big part of what causes this, which can more accurately be described as commodification. access to difficult things was formerly measured by one's ability to expend effort in order to get there (ignoring, for now, the structural conditions that set one up for success in that effort). when these things are commodified, these efforts and identities become products to purchase, the right to which is nearly never limited; in fact, it's almost seen as evil to imply that they should not be available to any individual at any time that individual may desire access.
i know we all have to start somewhere, but there has always been some historical filtration that leads people who are not truly engaged with a subject on a deep level to disengage at some point. that's changing at a novel rate and scale across so many subcultures. it seems like a lot of us are just surprised at how many people even want access to what were once our sanctuaries and we're not capable of grappling with what it takes to adapt to these changes.
i don't think this will pass or that things will return to "the way they were" but there will always be pockets that resemble previous subcultural forms. we just have to re-learn how to identify them with a keener eye and how to better avoid or more-appropriately interact with those who have a more superficial interest in them.
kanzure 2 hours ago [-]
While you might have access to the subculture, there is no obligation for anyone else to respond, collaborate or engage with random you. This is a common mistaken understanding about open-source software projects where users often believe they have "rights" to compel or coerce volunteer developers to listen or reply to them. Developers collaborating together isn't a conspiracy, it's just preferences getting played out. No, I don't want to collaborate with someone that I don't like.... duh?
It gets bad when the subculture inhabitants get confused and adopt the social norms of the passer bys instead of remembering the importance of well-kept gardens. And then they start to introduce "policy".. which is just a backdoor for attackers to destroy your well-kept garden by arguing policy (as if that was what the subculture was about!).
GuinansEyebrows 1 hours ago [-]
> While you might have access to the subculture, there is no obligation for anyone else to respond, collaborate or engage with random you.
true, but i think there's historically often been good-faith efforts to engage with newcomers in any field that requires intellectual or artistic curiosity or experimentation. what we're seeing played out is that this default good nature ignores the risk involved in growing a small garden beyond one's own property. there is a change in meta-social requirements at scale.
the extremes of this are super apparent in FOSS - one side of this being death-by-committee and overgovernance at the expense of the original project (requiring a support organization that outgrows the actual "work", for example, look at how many HNers view unions or internal policy committees), and the other side a harsh rejection of newcomers or calcification against new ideas at the expense of the long-term viability of a project. these issues can be imperceptible or not important in smaller projects.
but they're not limited to FOSS. i think these are probably fairly well-studied ideas in any form of organizations - business, social groups, churches, non-profits, unions, etc. i don't really know where to start to learn more about this or what the right approaches are (and i suspect they're often pretty unique to the group in question). i don't have an answer but i'm really interested in the huge grey area between fully-gatekept cultures and fully-open ones.
3 hours ago [-]
2 hours ago [-]
thesuitonym 2 hours ago [-]
This space is where AI usage is most confounding to me. Regardless of your stance on AI, this work does not need to be done. So if you don't enjoy it enough to actually do it, why are you even here? If you do enjoy the work, why are you letting the AI do your hobby? Don't you miss it?
orangedog 2 hours ago [-]
Some people get value out of finding results not the actual work. It is still work, just different kind of work.
suburban_strike 2 hours ago [-]
Power. It's people jockeying for power over groups.
It doesn't matter if you have no interest in <autistic specialty>, the point is that you can force a bunch of nerds to bend to your will.
0x69420 3 hours ago [-]
now imagine how many other devs and maintainers are contemplating this but just haven't been pushed to their personal breaking point yet. or take note of how many, when asked about the spam problem, just nervously go "yeah it's kinda rough haha...". or how many will vent about it on their twitter-like of choice with increasing frequency.
remember hacktoberfest 2020? that's just all public-facing source 365 days a year now, except instead of "updated README.md" it's some vaguely-plausible fix... then you read the PR body and someone couldn't even be bothered to, or, just as likely couldn't explain it themselves. and that sort of sinking dread sets in.
scronkfinkle 3 hours ago [-]
> remember hacktoberfest 2020?
Oh man, if you read the threads about that it's such a time capsule of a different era:
> I am honestly surprised how little SPAM there is on GitHub in general. Please don’t take that as a challenge!
throwup238 2 hours ago [-]
Microsoft took it as a challenge.
ssl-3 2 hours ago [-]
> now imagine how many other devs and maintainers are contemplating this but just haven't been pushed to their personal breaking point yet. or take note of how many, when asked about the spam problem, just nervously go "yeah it's kinda rough haha..."
At first, my brain parsed "spam" as in ye olde email spam. It took a moment for it to sink in that you meant code spam, instead.
But now that the two concepts are linked in my little pea brain: I kind of want to see how a system like SpamAssassin would work when applied to pull requests like it has been applied to email.
It can use reputation, real-time blacklists, triggers for form, and et cetera, with weighted scores for every aspect that are ultimately factored into one final score.
If final score is passing, the PR is presented for a human to review like a PR was (say) 5 years ago. If the final score fails, it goes into the circular file where it will probably die.
BrtByte 2 hours ago [-]
The funny part is that we'd probably recreate the entire email spam arms race
ssl-3 1 hours ago [-]
That's OK. Maybe it's even inevitable.
I've been on both sides of the spam arms race at different times of my life. While they'll never be able to claim victory, the good guys (usually!) seem to be winning -- and that's a lot better than accepting defeat.
jeremyjh 2 hours ago [-]
There are reputation and vouch systems but there is definitely room for innovation; I don’t think there is any clear leader.
BrtByte 2 hours ago [-]
The asymmetry is what makes this feel unsustainable
jwcooper 2 hours ago [-]
I would guess we'll start seeing more open source projects with much tighter restrictions on who can participate. Closed contributions and heavily automated (or even closed) issue tracking is probably already happening and will spread faster.
I entirely sympathize with these maintainers too. I've had 2 instances where an LLM has surfaced a bug and I just couldn't get myself to open a PR and dump more work onto these maintainers, even after manually writing one up (neither were critical bugs, it's fine).
Seeing popular projects (like hermes) having 5k issues and 5k pull requests is madness.
Marsymars 2 hours ago [-]
> Seeing popular projects (like hermes) having 5k issues and 5k pull requests is madness.
It's actually got nearly 30k open pull requests!
user43928 2 hours ago [-]
Modern problems require modern solutions.
Why not set up a triage bot with only read permissions on the project and restricted network access in order to triage issues?
Perhaps this way one could turn the influx of spam into a source of useful information.
jeremyjh 2 hours ago [-]
These exist. Very elaborate systems in many cases. Otherwise Hermes would probably have 30,000. Like a lot of agent tools they merge a ton of slop though so I wouldn’t consider them leaders.
user43928 1 hours ago [-]
So, what is the problem then?
Genuine question. Is having a prioritized list of reported issues still not useful in practice?
Marsymars 2 hours ago [-]
> Otherwise Hermes would probably have 30,000.
It already does!
staminade 2 hours ago [-]
On the other hand we'll probably see a lot more fully vibecoded projects gaining traction, because of the rate at which they can move once human design and review gets taken out of the equation.
For example, I recently came across Hucre, https://github.com/productdevbook/hucre, which is a JS spreadsheet library apparently developed entirely in the past few months and which has already gained 2.2k GH stars.
Is it any good? Who knows, but the alternatives for spreadsheet handling in JS aren't great, either being limited, semi-commercial, or unmaintained. And creating a new one without LLM-assistance is a huge, painful, mostly thankless undertaking. It's not surprising that a zero-dependency option that promises to do everything this can do would be popular.
Everyone has had the experience of butting their head against functionality limitations of open-source libraries. Fully vibecoded libraries will be able to add functionality at a rate that human-authored ones can't. Code quality might suffer, but if a library has a feature you need, and you've got a deadline to hit, are you going to avoid using it? Is the average developer? Or the average LLM?
I think we're about to hit an interesting period of human-only projects competing with vibecoded ones, and it'll be an acid test as to whether the pro and anti claims about AI-coding bear out in terms of code reliably.
4 minutes ago [-]
arnaudsm 3 hours ago [-]
Misleading title, there's another major reason: it's an embargo agreement violation that jeopardizes Linux support on PS5.
Nothing misleading about the title and you are splitting hairs.
arnaudsm 3 hours ago [-]
Omitting half of the story is misleading, this isn't a pro/anti LLM story.
Vibecoding has been the norm for months, it's the embargo violation today that triggered his resignation.
lokar 3 hours ago [-]
The headline accurately summarizes the main point of the story, and the part that is emphasized is from the subject of the story.
VCFundedGenYer 1 hours ago [-]
> Vibecoding has been the norm for months
That's your editorialization.
croes 2 hours ago [-]
Just because something is the norm, which I doubt, doesn’t mean it’s good.
Eventually comes the straw that brakes the camel‘s back
lovich 3 hours ago [-]
> …been the norm for months…
You know, it’s petty, but I think one of the things I hate the most about AI is that it surpassed front end JavaScript frameworks in terms of changing what the standard is every few years.
What’s the point of learning anything if it becomes obsolete faster than the seasons change?
analognoise 2 hours ago [-]
There are a massive number of people who want the ends of programming and geekery but lacked the means. They are overjoyed that they can abrogate the means and enjoy the reflected light of achievement, especially if it cheapens the part they feel inferior about: namely, actually understanding and learning about the systems.
As such, to them, it’s a BENEFIT if the systems change at a rate no mortal would ever agree to. Why learn anything, after all?
arnaudsm 2 hours ago [-]
It's the fear of being left behind that fuels both these things.
croes 2 hours ago [-]
Left behind what?
If AI works as promised coming late to the game is an advantage.
How many tricks for prompts are already obsolete, how many tools, harnesses etc. are already replaced by better alternatives?
It’s the difference between knowing a foreign language and only using a translator.
The former changes you brain structure and your way of thinking, the latter don’t.
lovich 1 hours ago [-]
Yea. I've evaluated these AI development patterns 3-4 times over the past year while applying for jobs.
I've been told by currently employed engineers that I was at state of the art development after a week of using them each time.
This also seems to have played out in hiring as every interview I've managed to pull has been completely schizophrenic with the interviewers wanting me to show AI fluency(for whatever that means) and then seemingly panicking mid way through as I start using the AI that can immediately solve the bog standard interview questions and then switch to having me manually build things.
sublinear 2 hours ago [-]
Just so you know, the frontend framework wars started and ended pretty quickly in the latter half of the 2010s.
It was the downstream effect of the browser wars settling down and W3C making big moves on getting vendors to finally implement standards that were sorely needed. It had nothing to do with web dev culture.
gamessucknow 2 hours ago [-]
> Just so you know, the frontend framework wars started and ended pretty quickly in the latter half of the 2010s.
Funny thing on HN. I saw people actively complaining about “JavaScript framework of the week” posts well into the early 2020s… when they were no longer really a thing.
lovich 2 hours ago [-]
> It had nothing to do with web dev culture.
It may not have been started because of web dev culture, but it definitely influenced web dev culture.
sublinear 2 hours ago [-]
Are you a web developer?
lovich 2 hours ago [-]
I was before the market crunched.
What's the reason for the credential check?
Daishiman 2 hours ago [-]
To be fair the JS frontend communities brought this to themselves way before LLM slop.
I found it a bit hard to understand this discussion because I wasn't familiar with the background. If I've got this right, his project let you run Linux on a PlayStation 5 (thus also providing the ability to run modern games).
Slop kiddies using AI discovered the PS5 hypervisor exploit it relied on for installation. Initially they agreed to his request to delay reporting it to Sony until after GTA6 came out (so users could at least install and enjoy that highly anticipated game). But then they turned around and disclosed it anyway (the same or next day?).
They presumably gained a nominal bounty, but nuked the project he'd poured so much hard work into. Including support for the PS5 Pro he was preparing to release next year.
The community used to be a group of talented researchers, but he's frustrated it's diluted into participants who aren't aligned with his values and don't even understand the hacks they produce.
52 minutes ago [-]
2 hours ago [-]
softwaredoug 2 hours ago [-]
> The scene used to be a group of highly talented researchers, but now it is just a bunch of noobs using LLMs and writing hacks they don't even understand. Slop kiddies found the only hypervisor bug left, which I had also found a while ago, and decided to report to Sony.
I don’t know if he’s mad AI scooped a bug? Or that LLM slop kiddies don’t pay attention to that something is already known?
ChrisRR 2 hours ago [-]
Reading all of the quotes it seems he's more annoyed that they disclosed the bug to Sony to collect the bounty, and that they're using AI as an afterthought
kotaKat 2 hours ago [-]
All Sony had to do was give us a path forward to run our own code on the PS5.
But I guess Sony being a gatekeeper wasn't a gatekeeper enough for certain regulatory agencies.
VCFundedGenYer 1 hours ago [-]
Did you even click the link? That's not true at all. The title matches the tin.
sva_ 3 hours ago [-]
> The scene used to be a group of highly talented researchers, but now it is just a bunch of noobs using LLMs and writing hacks they don't even understand. Slop kiddies found the only hypervisor bug left, which I had also found a while ago, and decided to report to Sony.
Sounds like he is salty that somebody found an exploit using LLM that he found manually (which probably took a significant amount of time.) I can partly understand it, but I mean that's also just the game that somebody else might find an exploit, LLMs just make it easier. LLMs finding bugs is not a bad thing, just sucks for enjoyers of open source software in this particular case.
You can probably find more though.
gbil 2 hours ago [-]
>I asked them to at least wait for GTA 6 to come out so that people would have the opportunity to legally purchase the game and also enjoy linux. They agreed to wait, but not a day passed and they decided to waste it instead.
This guy has used on working with people that understand the scene, it seems that they were in contact, they agreed on something and then the next day they did something different.
This is really important in the context of what happened and probably the cherry on top of the current "hacking" cake, with the bar being lowered so much that anybody can jump in with some minor skill and luck and get something just for themselves.
deletedie 3 hours ago [-]
Rather, he's annoyed because the LLM User submitted the exploit to Sony (to get paid) and killed the only known viable path forward for development.
Qiu_Zhanxuan 2 hours ago [-]
yeah, and tbh he should be, one douche ruined it for the rest of us
Den_VR 2 hours ago [-]
Any noticing what it paid?
xethos 12 minutes ago [-]
"Everyone else enjoying this got screwed, but how much did the one guy get paid do we think?"
Having the money to pour into an LLM to find this tautologically means it won't have been a life-chaning amount of money, and does not engender support for the person that reported the exploit to Sony
tetromino_ 2 hours ago [-]
> Sounds like he is salty that somebody found an exploit using LLM that he found manually
Nope. He is salty because someone made public the secret exploit that Linux-on-PS5 apparently relies upon to bypass Sony's hypervisor protection. Now Sony will fix the exploit, and there will be no more Linux on the PS5 until another exploit is found.
sva_ 2 hours ago [-]
Okay, I misunderstood. But it wasn't particularly secret if 'noobs' had access then?
bothers 1 hours ago [-]
You didn't misunderstand. Misundertanding requires a higher level of engagement than you have demonstrated.
> But it wasn't particularly secret if 'noobs' had access then?
And you persist.
MSFT_Edging 2 hours ago [-]
It sounds like he had already found it the old fashioned way, then the noobs sic'd the LLMs on it, found it, and he told them "hey chill, we knew about this, don't ruin it" and they ruined it.
To quote Dr Ian Malcolm:
"If I may... Um, I'll tell you the problem with the scientific power that you're using here, it didn't require any discipline to attain it. You read what others had done and you took the next step. You didn't earn the knowledge for yourselves, so you don't take any responsibility for it. You stood on the shoulders of geniuses to accomplish something as fast as you could, and before you even knew what you had, you patented it, and packaged it, and slapped it on a plastic lunchbox, and now
[bangs on the table]"
voidnullvalue 2 minutes ago [-]
That quote logically implies that people should be paralyzed to act on any novel information. There is no such thing as a discovery that occurs in a vacuum without some prior art. "Standing on the shoulders of giants"
Then again, its a silly illogical movie
wuhhh 30 minutes ago [-]
[dead]
Shorel 1 hours ago [-]
No guarantee at all that a new exploit will be found, and even much lower probability that a suitable lead developer will be found. The slop kiddy was just an asshole TBH.
lightedman 2 hours ago [-]
"Sounds like he is salty that somebody found an exploit using LLM that he found manually"
No, he's salty that this last remaining hypervisor exploit is going to get patched, causing his PS5 Linux project to get wholly-fucked as now there will be no (currently-known) way to sideload the OS. Reading comprehension is very important here.
DaSHacka 2 hours ago [-]
I think you've hit the nail on the head. I've seen this behavior from others in the space before too, it's not a one-off. They refuse to use LLMs themselves, and state as much publicly "I simply don't need to resort to using the slop machine, my skills are superior", yet FUME when others they deem as "lesser" are able to use it to achieve the same results as them, oftentimes faster.
I can guarantee this post would not have been made had he not been the one to find that vuln first.
bothers 2 hours ago [-]
In this case, the "same result" was killing the project for money. But yeah, lol he mad, xd, etc. What a quality contribution.
DaSHacka 45 minutes ago [-]
That's not the fault of the model, though. Even knowledgeable people that found everything manually can (ir)responsibly disclose it to the vendor for a payout.
Just look at the iOS jailbreaking scene and how Apple repeatedly poached all the devs until there was no one left, killing it off well before LLMs.
croes 2 hours ago [-]
This sounds like LLM noobs ruined the chance of legally playing GTA6 and habe Linux support and he seems pretty frustrated about it
> I am stepping away from the ps5 scene and stopping all my work on ps5 linux.
After pouring my heart and months of my life into it, including plans to finish ps5 pro support and release in 2027, it's all down the sink.
> The scene used to be a group of highly talented researchers, but now it is just a bunch of noobs using LLMs and writing hacks they don't even understand. Slop kiddies found the only hypervisor bug left, which I had also found a while ago, and decided to report to Sony.
> I asked them to at least wait for GTA 6 to come out so that people would have the opportunity to legally purchase the game and also enjoy linux. They agreed to wait, but not a day passed and they decided to waste it instead.
KirkDiamond 3 hours ago [-]
[dead]
_zoltan_ 3 hours ago [-]
[flagged]
viktorcode 3 hours ago [-]
I don't find that offensive at all. People do not understand the code they make AI to generate, but that doesn't stop them from submitting. This is a real problem that has hit many open source projects, and I expect more and more of them will introduce barriers to submission.
mrbonner 3 hours ago [-]
It’s not only for coding. If my coworker send me a lengthy doc that obviously 100% written by AI without even reviewed/revised by them, I wouldn’t read because it is a waste of my time and an insult to me.
Jtsummers 3 hours ago [-]
We removed a guy from a project for doing something like that. North of 100 pages, and mostly wrong. What wasn't wrong was so generic it was useless. I don't know what he's working on now, but at least it's not our stuff.
noir_lord 3 hours ago [-]
LLM use has been polarised like everything else seemingly is.
I have no issue with people using them to do things they could already do themselves as an efficiency thing and if they check and understand the result.
Unfortunately that seems to be the exception not the rule and the amount of "one shot slop" has increased dramatically, it's even affecting the modding communities for games.
This is gonna be a mess that is going to take time to figure out and then even more time to clean up.
gblargg 3 hours ago [-]
You ignored the part about "writing hacks they don't even understand." LLM is fine if you use it as one of many tools to form your work and not a substitute for yourself.
bigfishrunning 3 hours ago [-]
> I find this very offensive.
You shouldn't, unless you're producing a bunch of code you don't understand.
lioeters 36 minutes ago [-]
They are identifying with this new powerful technology, because it makes them feel as if they're powerful also.
Like how drivers of monster trucks get a rush from feeling like the power of the machine is their own. Some users of LLMs exhibit the same kind of arrogance of being on the side of a powerful force, like the law enforcement or military. I imagine some gun owners get that rush too. When you take away the gun or the truck, suddenly they feel vulnerable.
_zoltan_ 3 hours ago [-]
you might be OK with calling everybody using LLMs a bunch of noobs. I disagree. this has nothing to do with my own usage.
buttercraft 2 hours ago [-]
> everybody using LLMs a bunch of noobs
That wasn't even the claim...
bigfishrunning 2 hours ago [-]
I don't think he was calling everybody that is using LLMs a bunch of noobs. I think he was calling the people using LLMs to submit code they don't understand a bunch of noobs. I think if the patches were well reasoned and could be talked about in detail by their submitters, he'd have much less of a complaint.
3 hours ago [-]
Aurornis 1 hours ago [-]
Person 1 finds an exploit the old fashioned way. Keeps it secret because they’re doing some PS5 Linux work and want to keep it unpatched until GTA6 releases in 2 weeks. I don’t have a PS5 but I assume new games might require a firmware update to play?
Person 2 uses an LLM and finds the same exploit.
Person 1 asks Person 2 not to report it and collect the bounty until GTA6 is released. Person 2 agrees.
Person 3 also finds the same exploit independently.
Person 2 discovers that Person 3 has found the exploit. Person 2 decides the cat is out of the bag and submits it to Sony while they still have a chance.
Now the community is angry that Person 2 didn’t sacrifice the bounty. PS5 Linux effort seemingly falls apart in response? Departing developer directs community to be angry at Person 2, who is taking time away to be with their critically ill mother.
Honestly I can’t blame Person 2. They earned the bounty and played by the rules of the bounty program. The PS5 Linux dev who abandoned the project and started deleting things is entitled to do so, but blaming Person 2 for the crash out is too much.
addandsubtract 43 minutes ago [-]
GTA6 is still 8 weeks away.
dmitrygr 1 hours ago [-]
> earned the bounty
Yeah, nothing like the hard work of typing "look at this binary and find a bug" The sweat, the tears it must have taken!
user43928 51 minutes ago [-]
Do you know whether this was a simple prompt or if it took an expert 20 hours with AI use?
The link is not loading for me, so I could not access the article.
ChrisRR 3 hours ago [-]
This title and the first quote are misleading. A dev found an undisclosed hypervisor exploit using AI that TheFlow0 had been using and keeping secret, but the other dev had informed Sony to collect the bug bounty.
It's an issue that the dev attempted to collect the bug bounty, AI or no
softwaredoug 2 hours ago [-]
“Using and keeping secret” - for nefarious purposes? Or to make Linux work on PS5?
ChrisRR 2 hours ago [-]
Well given his history, it's almost definitely to make linux work
forgotpwd16 2 hours ago [-]
Ok, that's indeed much different from what title implies, essentially attempting to contribute with AI code/reviews. Sony pays $$$$ for security exploits. If indeed a "slop kiddy", i.e. a noob fooling around with an LLM, found it, and if they aren't interested in homebrew scene like theflow, makes no sense not to report it and wait, as it's a bug that's now trivial to find, and can expect many others to.
digitalsushi 58 minutes ago [-]
My mom sure can hydrate a pizza. My grandma, rest her soul, said mom has no artistry in it. I heard stories that my grandmother worked the dough with her bare hands (ew); it always came out slightly different; more ridiculous, I heard her generation would devote a portion of an entire day (if you can even humor that ridiculous notion) to pizzacraft.
Grandma was always a broken record with that stuff. The family would sit around that table, apparently, gabbing about nothing, and everything, just staring into a raw pizza, pulling and stretching it, starting over, living with their hunger, for a flawed process to bake slowly.
These days, fresh pizza is 10 seconds away, it's always identical and we never have to share. It's hydrated, eaten, and in the trash by the time I am onto my next attention, always perfect, always on time, always identical. I don't think about this much, but I sometimes really feel pity for what the old timers suffered through, all those ridiculous, pointless wasted interactions and delays, sitting there for what felt like ages, for a random pizza shaped thing.
I dont get it.
Lt_Riza_Hawkeye 53 minutes ago [-]
okay, but what about people who get more enjoyment out of talking to their family while performing a shared task, than eating the pizza. showing up to the pizza making session a frozen pizza from the store says "I don't want to talk to you"
freedomben 2 hours ago [-]
> it seems that vibe-coders, or “slop kiddies” as the modder dubbed them, used AI to detect a bug that they were using to crack consoles, and reported it to Sony for a bounty.
That would indeed be incredibly demoralizing, even crushing. Quite a dick move.
Now that said, I imagine it was only a matter of time anyway until Sony found/fixed or someone else did the same thing. It's just a different world now.
As much as I'd love a non locked down PS5, anyone buying one knows what they're getting. If you care about user empowerment, PC (Valve hardware, etc) is the place to put your money and time. Sony is actively hostile toward you and wants you locked down, and trying to fight it with exploits is destined to be a nasty cat and mouse game. Go with a vendor that is more aligned to your values.
zb3 2 hours ago [-]
So the non-noob-but-asshole (supposedly talented) dev was relying on the fact that Sony would not run the same tools "noobs" did. Well, that's.. not smart.
blablabla123 2 hours ago [-]
It's strange working on Opensource these days. I've mostly worked on my own stuff alone which usually doesn't get much attention/additional contribution. Then I see on Reddit, HN or LinkedIn someone creating a major App or Plugin in a weekend. Sometimes I take a closer look the artisanal quality is effectively unmaintainable, at least for humans. But in the end it's hard to get a good overview, and the sheer quantity seems to dwarf any other efforts.
Not to mention how the code can then be sourced by an AI model in an instant without any credit.
VadimPR 2 hours ago [-]
We've solved this in our FOSS project by requiring all PRs to have been tested and manually signed off by a human. It significantly decreased the amount of spammy LLM made PRs, while empowering the core contributors to move faster.
cyberrock 2 hours ago [-]
I've seen kiddies take advantage of homebrew developers to develop game piracy many times, but this is the first time I've seen kiddies do it to fix the exploit for the bug bounty. How the times have changed.
2 hours ago [-]
1970-01-01 2 hours ago [-]
This qualifies as "AI took away my job" but we are dismissing that because the AI influence was indirectly responsible for the job loss.
2 hours ago [-]
random3 2 hours ago [-]
There’s also the other side of the same coin where maintainers ignore your contributions. I’m happily forking things permanently and will likely rewrite them on cleaner foundations. I’ve never loved my tools more than I do now when I can get them coded at the same pace I think of them.
On the other hand, it’s been clear for a while that software as we knew will end up at a close to 0 marginal value.
Gatekeeping is a good thing. It's how communities stay healthy and vibrant. Gatekeeping means that when someone shows up to your birdwatching club and says "I hate going outdoors, can we just look at photos of birds from the Internet?", you politely but firmly say "sorry, this isn't the club for you". If you don't do this, then soon enough your club won't be about birdwatching at all, but will be about looking at pictures on the Internet. Same goes for any other community or subculture: it is perfectly okay to say "we aren't changing our standards, and this activity may not be for you".
Of course gatekeeping can also be toxic. But anything can be toxic if applied too much. You can die from water poisoning, that doesn't mean water is bad. It means you need to not overdo it. I've seen what a lack of gatekeeping has done to many communities I used to enjoy (including programming), and I think it's high time we did more gatekeeping. We don't want to overdo it, but right now we are doing far too little and that needs to change.
Game_Ender 3 hours ago [-]
The headline here is off, PS5 Linux relies on bugs for installs, and the project couldn’t keep the last know hypervisor bug secret:
> Slop kiddies found the only hypervisor bug left, which I had also found a while ago, and decided to report to Sony,” the modder said on social media. “I asked them to at least wait for GTA 6 to come out so that people would have the opportunity to legally purchase the game and also enjoy linux. They agreed to wait, but not a day passed and they decided to waste it instead.”
So what has really happened is the LLMs have lowered the participation floor for this space enough the dynamics are changing. The new comers would rather have a few dollars vs. the founders who would rather have a project. It’s likely the projects days were numbered either way because Sony could also just take a frontier LLM and examine any released installer for the project and reverse engineer and bug.
itomato 3 hours ago [-]
Lowered the barrier to entry, but also raised the stakes. My money is on dedication to the high-stakes problem.
How old was this bug? How much energy has been devoted to RE of this proprietary console? Not enough, apparently.
parineum 2 hours ago [-]
Everyone in this scene knows upgrading your console is sure path to getting yourself locked out of current and probably future exploits. I don't think anything really changed here. The moment these exploits go public, they'll be patched in the next version.
This vulnerability will still exist in older versions. The project can still continue development of Linux on PS5 and, eventually, another exploit will be found that enables the installation on a later version.
Frankly, based on the language used, a resignation over this seems to have a lot more to do with the person being upset that LLMs are lowering the bar for entry. They seem more upset that their skills aren't as useful as they were.
It seems like the reputation as a PS5 hacker was the objective, not getting Linux running on PS5.
WD-42 3 hours ago [-]
So the slop kiddies both don’t understand what they are doing, and they ruin the party for everyone else. Nice.
monegator 3 hours ago [-]
As usual: Normies end up destroying every community they get into
Fascinating times we live in, when "the last hypervisor bug" in what is presumably one of the most hardened pieces of consumer hardware can be found by "noobs" and "slop kiddies".
gosub100 2 hours ago [-]
I say it's only because LLMs came out after the PS5 was developed. Presumably, future generations of hw (if there are any) will use the same methods to harden the attack surface. Good ole cat and mouse.
NietTim 3 hours ago [-]
Makes you wonder if it really was "noobs" and "slop kiddies" that found it.
Catloafdev 2 hours ago [-]
No, it doesn't. Nobody would go do this just to report it to Sony for a few pennies. That is a non-existent motivation for people in the know, who understand the opportunity cost.
ChrisRR 2 hours ago [-]
Unless they didn't want to actually make money from anything nefarious, and the bounty was more than just "a few pennies"
oridb 3 hours ago [-]
Well, sure, the same way that I can "cook" a three michelin star meal by going out to eat at the French Laundry.
It's just boring. And the people that crow about "their" accomplishments are tiresome.
zorkonator 3 hours ago [-]
Hypervisor bugs are boring? Maybe to you.
oridb 2 hours ago [-]
Hiring someone else to find them is boring as hell. If you only care about being spoonfed results, I don't think there's much to talk about.
IslandRebel 3 hours ago [-]
> “Slop kiddies found the only hypervisor bug left, which I had also found a while ago, and decided to report to Sony,” the modder said on social media. “I asked them to at least wait for GTA 6 to come out so that people would have the opportunity to legally purchase the game and also enjoy linux. They agreed to wait, but not a day passed and they decided to waste it instead.”
If one user could have found this using AI. Then I would imagine anyone else could have found it.
orangecat 2 hours ago [-]
Then I would imagine anyone else could have found it.
Right, including Sony. AI finding security flaws is very good in general, but one downside is that it will become easier to make "secure" devices that are hostile toward their owners.
IslandRebel 2 hours ago [-]
Sure, but that wasn't what I was getting at. The guy is complaining about the exploit being disclosed to Sony, but anyone who used the same tools could have found it. It's kind of like complaining that someone has spoilt the ending to a film when it been out for over a year.
TuxSH 2 hours ago [-]
> If one user could have found this using AI. Then I would imagine anyone else could have found it.
People are still fixated on using AI to produce code (to reduce salary costs/dev time) rather than using it to audit bugs in one own's code, which they are better at.
The latter has "always" been obvious to me.
kmeisthax 2 hours ago [-]
> “Slop kiddies found the only hypervisor bug left, which I had also found a while ago, and decided to report to Sony,” the modder said on social media. “I asked them to at least wait for GTA 6 to come out so that people would have the opportunity to legally purchase the game and also enjoy linux. They agreed to wait, but not a day passed and they decided to waste it instead.”
Ever since consoles became moving targets there's been deliberate gatekeeping - specifically, drip-feeding of bugs - to maximize the chance someone can actually use them to break DRM and install Linux. This relies on the fact that most people do not want to have to become FreeBSD kernel experts in order to install non-PlayStation software on their PlayStation. But if everyone is vibe-hacking their PS5s then none of this logic applies. Any bug Claude can find is one Sony also knows about and will get patched, possibly before you even release an exploit for it.
How this ultimately plays out depends on if it's even possible to write software without bugs. Maybe this reaches a new equilibrium where people are paying Claude to vibe-code jailbreaks - as I'd initially hoped. But it's equally as likely that this winds up reinforcing DRM rather than weakening it, for a few reasons:
1. Anthropic's AI safetyism culture encourages the prohibition of vibe-coded jailbreaks. The fact that the model runs on a server and people are spying on your chatlogs means Anthropic has actual knowledge of who is actually using their service to find PS5 hypervisor bugs. Letting Claude break DRM is legally risky; DMCA 1201 implies the only lawful way to break DRM is for you to find your own bugs. So it's probably not going to be long until everyone vibe-coding jailbreaks will get banned.
2. Sony will not be getting banned from these services, they will get trusted access as they're big enough for Anthropic to sue if it gets misused.
3. The attack surface of the thing you have to actually compromise to get code execution on any locked-down system is really small. The Xbox 360 had a 15+ year gap[0] of no softmodding because they'd isolated all the memory protection into a hypervisor. Apple learned the same lesson and iPhone jailbreaking went from incredibly commonplace to "if you know how to do it someone at Zerodium will hand you a million dollars to write spyware with it".
[0] AFAIK, the only two actual softmoddable bugs on Xbox 360 were the King Kong hack right at launch, which got patched in like a week, and that BadUpdate thing last year.
poopiokaka 11 minutes ago [-]
[dead]
2 hours ago [-]
theycallmeritik 2 hours ago [-]
[flagged]
JonathanCross 3 hours ago [-]
[flagged]
dpmartinez 3 hours ago [-]
[flagged]
gamessucknow 3 hours ago [-]
Why do these booster accounts always sound like they have just a slightly sub-average IQ?
deadbabe 3 hours ago [-]
Because they are anti-intellectuals. They do not want people to hold influence by having massive intelligence.
garyhasapoint 3 hours ago [-]
gamessucknow i think you may have a hidden bias
MadSudaca 3 hours ago [-]
how can it be a hidden bias if you just called it out?
cindyllm 3 hours ago [-]
[dead]
dpmartinez 3 hours ago [-]
It has been a week of you on this site and you haven't even bought a mirror.
I'm sure you do realise you're talking about yourself?
xerox13ster 3 hours ago [-]
I’m confused.
Is the “power of the community” to narc on themselves to the corporations that they are building their community around, only to have the corporations destroy the community’s efforts?
Because that’s what happened here. This isn’t a case of gatekeepers self selecting out.
This is a case of slop kiddies making it impossible for him to continue to do his work by reporting it to Sony for personal profit and having them lock down the exploits he was using.
If that’s the power of the community, if that is the future, then he is right and you are wrong.
This is not a case of a gatekeeper slowing down development. This is a case of the slop kids making it fucking impossible to continue development.
This is the worst outcome and your brain is so cooked by AI that you’re seeing it as the opposite.
Where is the AI generated Linux kernel for PS5?
What lockdown corporate product have the slop coders managed to put Linux on? Anybody vibe cracked an oculus headset or Apple Vision Pro or the Xbox?
Some individual profited and the community ended up with less.
3form 3 hours ago [-]
I would hardly call the requirement to understand the code you push "gatekeeping".
toomuchtodo 3 hours ago [-]
LLMs make excellent people better and mediocre people confident, from first hand experience working with both and asking both cohorts to show me how they use them.
ktimespi 3 hours ago [-]
The article is about using it to the detriment of the community...
jplusequalt 3 hours ago [-]
>The community can now contribute code and solve issues more faster rather than a handful of people gatekeeping slowing down development
Everyone hates gatekeeping until they don't. Watch quality go down, issues increase, project direction become muddied, and suddenly people will be calling for more gatekeepers!
dopple 3 hours ago [-]
Alas, the age of slop is inevitable. We must unleash the kraken of slop upon us all! Rejoice, for resistance is futile!
vinyl7 3 hours ago [-]
More like shit software is the future
shevy-java 2 hours ago [-]
Folks,
AI skynet is currently winning the war.
LLMs have taken over so many projects already. If I were young,
would I want to contribute to projects maintained these days via
AI slop? I would not find that interesting at all.
brokencode 2 hours ago [-]
I mean, it sounds like a ton of inexperienced developers are finding it quite enjoyable, because they’re doing it in massive numbers.
It seems more like a spirit drainer for the experienced maintainers who have to deal with the onslaught.
I suspect we’re going to see much more strict projects with fewer allowed contributors going forward.
Though on the upside, an experienced dev can use AI to become more productive, so perhaps they will be less dependent on contributions.
ltbarcly3 2 hours ago [-]
I think the reason to not invest your time in PS5 linux is that sony hates it and will patch it away over and over, and nobody really wants it. It's $200, mediocre hardware.
I might be showing a lot of unc energy here, but if you can't afford a raspberry pi or something to play with linux, or a used pc, gaming and having a playstation 5 should be de prioritized for a bit while you get your life together.
alexjplant 2 hours ago [-]
> I might be showing a lot of unc energy here, but if you can't afford a raspberry pi or something to play with linux, or a used pc, gaming and having a playstation 5 should be de prioritized for a bit while you get your life together.
Your comment is framed as though Linux usage and what you deem an unstable lifestyle (lack of monetary means in your judgment) are mutually exclusive. Open-source software is for everybody, including the messy or disenfranchised. Would you frame a kid who got a PS5 for Christmas who doesn't have an allowance or job as a failure because they don't have $100 to spend on a Pi? It sounds like you just look down on people playing video games even when they want to use the very thing you're implicitly deriding to do the thing that you think they should be doing... doesn't seem to make a lot of sense.
forgotpwd16 2 hours ago [-]
You've misunderstood something deeply. PS5 Linux doesn't exist because running Linux on PS5 is something useful or practical. Exists due to the curiosity and fun of running a free OS on a locked-down device. Maybe some nostalgia mixed in as Linux has existed in every other PS (even PSP/PS Vita).
zb3 2 hours ago [-]
Good, hopefully "noobs" with LLMs will replace assholes.
Same thing did happen to many work places. People at all levels proxy questions through LLMs and don't even bother to read/trim/edit the response.
Funny, how suddenly a tight, 1-2 sentence response on point is a sign of skill.
Not as a rule for all prs you want to reject, but any time it seems to be no-effort pure ai. Both to waste as little of your own time and effort as possible, but also to to help make this activity not rewarding.
I wouldn't worry about false positives and being unfair. This is self defense and also community defense. Anyone legit will manage to get your attention. You'd be filtering not on any specific detail or rule but on simply "care". If a legit person fails to convince you that they are a human that cares, then that's just an unfortunate industrial accident. It's unfortunate but trying to do anything about it is worse.
https://www.google.com/search?q=sealioning
And while I generally believe we should be pro-social in our communications both with each other as software engineers and with others who don't know what we know, I think it's also fair game to point out that the thing being asked of you is commonly available knowledge. Google may suck as my sibling comment points out, and I agree, but filtering good info from info dumps, be that Claude or Google search, is a life skill that's more critical now than ever. And if you work in tech, really at any level, you know how to do that.
He got fired quite quickly after his boss realized it was all bullshit.
Wasn't it always?
A lot of people get this idea that "more verbosity = better" instead of optimizing for conciseness and information-density. I largely blame minimum word-count essays from school assignments.
Amusingly enough the advent of HTML-emails didn't produce any better formatted mails, despite the extra formatting options, than what you can do with a plain text email supported by a proper text editor.
Edit: although another quote comes to mind- "Quantity has a quality of its own."
It’s easy to send a pithy response that suggests experience and understanding without having either. Think of a middle manager spouting pithy buzzword laden cliches confidently in response to every request, then transferring the real problem to the grumbling employees who have to solve the actual hard parts of the problem which lie in the nuance.
Communicating well has always been a sign of skill. Talking to most devs was like pulling teeth even before LLMs.
https://github.com/JuliusBrussee/caveman
The experience in these spaces is largely the same. LLMs can be used there, too, but when the experts are using them with experience to back it up the results are a lot better.
The people who are really struggling in my few hobby groups (not PS5) are those who enjoyed some social status from their knowledge. They were heros and people sought them out and revered their work in 2023. LLMs came along and partially leveled the playing field. When a determined kid with a Deepseek subscription can produce a sloppy version of what took you years to find, that sense of being a heroic figure at the next level is gone.
I think this reveals another wrinkle, which is that the status hierarchy wasn’t that solid or worthwhile anyway. Outside of a few vocal people trying to enforce the status hierarchy, most people don’t care who releases their jailbreak or PS5 exploit. They just want it. Whoever gets it to them first becomes the new king.
This PS5 incident has some strange element where supposedly keeping the reveal secret for 2 more weeks would have changed something with the GTA6 release. There were also 3 people who found the same exploit independent and some large amount of money on the line for the first of them to report it. The person who reported it signed off to spend time with his dying mother, so can’t really fault them for doing the thing they earned according to the rules of the program.
Well it's that GTA 6 comes out in mid-November, so he wanted to wait until then to release the exploit so people could legally run GTA 6 on their hacked PS5s. Disclosing the exploit before the release means that they'll patch it before GTA 6 comes out so this is no longer an option.
I think this is unrelated because it happened after theflow0's statement, but Sony just released a major PS5 update that significantly increases the PS5's security ahead of GTA 6's release. Apparently it's impossible to rip games now without a hypervisor exploit, and since the last one just got reported to Sony this means that even people with hacked PS5s on old firmwares won't be able to pirate GTA 6 because nobody will be able to rip it. https://www.reddit.com/r/PS5_Jailbreak/comments/1wi0gpx/its_...
An old guard always tries to enforce an ordering of respect based on seniority and who they think has earned it the most. Outside of a terminally online circle of Discord users few people care. They only want the thing so they can use it.
LLMs are a big disruption because now because effort and results have never been more uncoupled. When a kid with an LLM can do a sloppy but good enough version of the work in 1/100th of the time with 1/100th of the experience, the social hierarchy only matters to people who value it above the outcome itself.
"Commodification" might be a relevant word here.
You can fight that by "building a personal brand", but then you're suddenly brand building instead of hacking, and hacking was what you actually wanted to do.
I guess it works best if you're not in it for clout but because you want something to exist. But even then it is difficult.
> There were also 3 people who found the same exploit independent and some large amount of money on the line for the first of them to report it.
Ah yes, game theory. Oof.
It is insane just how miserable the experience of FOSS hardware hacking in public is.
The expectation does not even the slightest match reality. You'd think "ah yes many eyes meaning all bugs get shallow", but instead you get worst of XDA-Developers and toxic wastelands where no sane person even answers anymore.
But this predates LLMs and was as miserable as it is now before as well.
In fact, I might even argue that LLMs made this _better_, because you can now avoid the "opening up in hopes of finding 1 helpful person below 99 annoying ones" through simple GPU compute.
Previously, you had to hope that through this self-inflicted horror, you'd find an expert that can augment you. Now that expert rests on huggingface.
It's still.. not perfect, of course. But it might be less miserable - provided that you adapt to the current state of things and stop with the "trawling for volunteers".
__
Of course, this does not help you against "skids let claude find bugs that you'd need and burn it for no reason" as per the twitter thread, but I wouldn't rule out that they would not have done that, if less information was public.
And.. that too was an issue before LLMs.
Information wants to be free, but so does your cat, and your cat gets run over by some crackhead in a 30 year old rusty pickup if you just put it outside without thinking.
So don't let it go out unattended.
That said, this "pep talk" is more directed at myself than at poor Andy. This must all suck big time.
Complaining about the inevitable toxic noise when the same boneheaded development decisions are made over and over like everyone has gone insane. You don't have to build a death trap on the land your cat and children roam.
Just like humans by their very nature are low quality, since they come from the biology ecosystem, where everything is built atop everything else.
Filthy carbon-based mammals.
And once in a blue moon something good comes out of it back to the real project.
Cherrypicking the occasional winner is just a side benefit.
This is definitely the case for me. Before AI tools became mainstream, it was already a difficult proposition to find other smart people who you could get along with and talk to, do something interesting together. The Internet made all the difference in my life because I was able to get outside my geographic region to do big things through open source and hacker communities. Now, that very important filter mechanism no longer works. It's Eternal September all over again. In a way, it's very much a domination of "ends" over "means" in the wider community that is being forced upon those who long focused on "means". For a lot of intelligent people, understanding something is /valuable on its own/, but for the wider world there is no value in simply knowing things, but what you do with that knowledge (or now that lack of knowledge). I even experienced this recently at DEFCON 34 where I saw other participants in some of the CTFs with me using AI tools and not really understanding what the tools were doing or what was happening, but just kind of bruteforcing/tokenmaxxing their way through. This isn't to say that those AI tools are fundamentally a bad thing to use in building open source software, security research, or even as a tool in a CTF, but that the "understanding" step needs to still be present or it destroys the fun in everything.
I'm certainly not having as much fun with computers these days, even as I've invested a lot of effort myself in local LLMs and trying to understand the tools and understand how to apply them reasonably, I've found I prefer much more analog entertainments. Thankfully there's always photography and lockpicking to entertain me at the moment and provide a pathway to meet other interesting fellows.
People who hate their job of course like to come out of the woodwork and say no one should enjoy it, but isn't it nice to have a society where at least some people can enjoy their work? I used to enjoy teaching but I'd never get a teaching job now because of how AI is being used in that sector.
Technophiles will say that we should embrace the future because its inevitable but how many good people quitting does it take before they realize that a vibe-coded future of fun isn't all there is to life?
That’s an interesting question. I thought about it for a minute and was surprised that I came to the conclusion that the answer isn’t obviously “yes”.
An analogous question is “isn't it nice to have a society where at least some people are rich?”, and I think that question should make it clearer to many people why that is so.
There’s a crucial difference between the two questions. “Rich” is a relative term: If everyone had the same amount of money, no one would be rich, you need someone to be worse off (poor) to have someone better off (rich). But someone enjoying their work has no bearing on someone else’s enjoyment of theirs.
The fact that so many people believe this is what bums me out.
You need to understand something: the people who want you to think this way do not have your best interests in mind, any more than the rabid right-wing Trumpers do.
In no way do I mean that someone has to suffer for someone else to thrive. We could (and should) all thrive and have our needs met.
I’m just saying the term is relative, like “tall” and “short”. If we were all the same height, no one would be tall or short, we’d just be. If we all had the same amount of money, no one would be rich or poor.
No one has to lose anything, in the sense that no one has to give up more than they think the product or service is worth to them. In your example, it's possible for everyone to grow taller.
For the third time, that is not the argument. Read what I wrote and try to steal man a bit. Get your preconceived argument out of your head and understand we are in agreement. The difference between wealth and money isn’t in question, that is something you just added to the argument and decided with zero basis that I disagree.
The fact that so many people jump to conclusions and immediately dunk on others who agree with them is what bums me out.
What a waste of a conversation. Why are you spending time criticising those who support the same points?
All I know is what you wrote, sorry. Same shit we could all read on Reddit: "If everyone had the same amount of money, no one would be rich, you need someone to be worse off (poor) to have someone better off (rich)."
If you frequently find yourself misunderstood in this way, work on expressing yourself more clearly.
the idea of gatekeeping is often seen as elitist or exclusionary (fairly enough in many cases) but i think this can be an exaggerated description of a culture that necessarily requires a standard of... let's say, desire to engage with material on a sufficiently deep level. many things can be for anybody, but they are not for everybody.
in the past i've seen the phenomenon of "opening up" subcultures or previously-niche intellectual/art fields described as democratization but i think that ignores a big part of what causes this, which can more accurately be described as commodification. access to difficult things was formerly measured by one's ability to expend effort in order to get there (ignoring, for now, the structural conditions that set one up for success in that effort). when these things are commodified, these efforts and identities become products to purchase, the right to which is nearly never limited; in fact, it's almost seen as evil to imply that they should not be available to any individual at any time that individual may desire access.
i know we all have to start somewhere, but there has always been some historical filtration that leads people who are not truly engaged with a subject on a deep level to disengage at some point. that's changing at a novel rate and scale across so many subcultures. it seems like a lot of us are just surprised at how many people even want access to what were once our sanctuaries and we're not capable of grappling with what it takes to adapt to these changes.
i don't think this will pass or that things will return to "the way they were" but there will always be pockets that resemble previous subcultural forms. we just have to re-learn how to identify them with a keener eye and how to better avoid or more-appropriately interact with those who have a more superficial interest in them.
It gets bad when the subculture inhabitants get confused and adopt the social norms of the passer bys instead of remembering the importance of well-kept gardens. And then they start to introduce "policy".. which is just a backdoor for attackers to destroy your well-kept garden by arguing policy (as if that was what the subculture was about!).
true, but i think there's historically often been good-faith efforts to engage with newcomers in any field that requires intellectual or artistic curiosity or experimentation. what we're seeing played out is that this default good nature ignores the risk involved in growing a small garden beyond one's own property. there is a change in meta-social requirements at scale.
the extremes of this are super apparent in FOSS - one side of this being death-by-committee and overgovernance at the expense of the original project (requiring a support organization that outgrows the actual "work", for example, look at how many HNers view unions or internal policy committees), and the other side a harsh rejection of newcomers or calcification against new ideas at the expense of the long-term viability of a project. these issues can be imperceptible or not important in smaller projects.
but they're not limited to FOSS. i think these are probably fairly well-studied ideas in any form of organizations - business, social groups, churches, non-profits, unions, etc. i don't really know where to start to learn more about this or what the right approaches are (and i suspect they're often pretty unique to the group in question). i don't have an answer but i'm really interested in the huge grey area between fully-gatekept cultures and fully-open ones.
It doesn't matter if you have no interest in <autistic specialty>, the point is that you can force a bunch of nerds to bend to your will.
remember hacktoberfest 2020? that's just all public-facing source 365 days a year now, except instead of "updated README.md" it's some vaguely-plausible fix... then you read the PR body and someone couldn't even be bothered to, or, just as likely couldn't explain it themselves. and that sort of sinking dread sets in.
Oh man, if you read the threads about that it's such a time capsule of a different era:
e.g. from this thread: https://news.ycombinator.com/item?id=31628342
> I am honestly surprised how little SPAM there is on GitHub in general. Please don’t take that as a challenge!
At first, my brain parsed "spam" as in ye olde email spam. It took a moment for it to sink in that you meant code spam, instead.
But now that the two concepts are linked in my little pea brain: I kind of want to see how a system like SpamAssassin would work when applied to pull requests like it has been applied to email.
It can use reputation, real-time blacklists, triggers for form, and et cetera, with weighted scores for every aspect that are ultimately factored into one final score.
If final score is passing, the PR is presented for a human to review like a PR was (say) 5 years ago. If the final score fails, it goes into the circular file where it will probably die.
I've been on both sides of the spam arms race at different times of my life. While they'll never be able to claim victory, the good guys (usually!) seem to be winning -- and that's a lot better than accepting defeat.
I entirely sympathize with these maintainers too. I've had 2 instances where an LLM has surfaced a bug and I just couldn't get myself to open a PR and dump more work onto these maintainers, even after manually writing one up (neither were critical bugs, it's fine).
Seeing popular projects (like hermes) having 5k issues and 5k pull requests is madness.
It's actually got nearly 30k open pull requests!
Why not set up a triage bot with only read permissions on the project and restricted network access in order to triage issues?
Perhaps this way one could turn the influx of spam into a source of useful information.
Genuine question. Is having a prioritized list of reported issues still not useful in practice?
It already does!
For example, I recently came across Hucre, https://github.com/productdevbook/hucre, which is a JS spreadsheet library apparently developed entirely in the past few months and which has already gained 2.2k GH stars.
Is it any good? Who knows, but the alternatives for spreadsheet handling in JS aren't great, either being limited, semi-commercial, or unmaintained. And creating a new one without LLM-assistance is a huge, painful, mostly thankless undertaking. It's not surprising that a zero-dependency option that promises to do everything this can do would be popular.
Everyone has had the experience of butting their head against functionality limitations of open-source libraries. Fully vibecoded libraries will be able to add functionality at a rate that human-authored ones can't. Code quality might suffer, but if a library has a feature you need, and you've got a deadline to hit, are you going to avoid using it? Is the average developer? Or the average LLM?
I think we're about to hit an interesting period of human-only projects competing with vibecoded ones, and it'll be an acid test as to whether the pro and anti claims about AI-coding bear out in terms of code reliably.
https://x.com/theflow0/status/2099987019954831744
Vibecoding has been the norm for months, it's the embargo violation today that triggered his resignation.
That's your editorialization.
Eventually comes the straw that brakes the camel‘s back
You know, it’s petty, but I think one of the things I hate the most about AI is that it surpassed front end JavaScript frameworks in terms of changing what the standard is every few years.
What’s the point of learning anything if it becomes obsolete faster than the seasons change?
As such, to them, it’s a BENEFIT if the systems change at a rate no mortal would ever agree to. Why learn anything, after all?
If AI works as promised coming late to the game is an advantage.
How many tricks for prompts are already obsolete, how many tools, harnesses etc. are already replaced by better alternatives?
It’s the difference between knowing a foreign language and only using a translator.
The former changes you brain structure and your way of thinking, the latter don’t.
I've been told by currently employed engineers that I was at state of the art development after a week of using them each time.
This also seems to have played out in hiring as every interview I've managed to pull has been completely schizophrenic with the interviewers wanting me to show AI fluency(for whatever that means) and then seemingly panicking mid way through as I start using the AI that can immediately solve the bog standard interview questions and then switch to having me manually build things.
It was the downstream effect of the browser wars settling down and W3C making big moves on getting vendors to finally implement standards that were sorely needed. It had nothing to do with web dev culture.
Funny thing on HN. I saw people actively complaining about “JavaScript framework of the week” posts well into the early 2020s… when they were no longer really a thing.
It may not have been started because of web dev culture, but it definitely influenced web dev culture.
What's the reason for the credential check?
Slop kiddies using AI discovered the PS5 hypervisor exploit it relied on for installation. Initially they agreed to his request to delay reporting it to Sony until after GTA6 came out (so users could at least install and enjoy that highly anticipated game). But then they turned around and disclosed it anyway (the same or next day?).
They presumably gained a nominal bounty, but nuked the project he'd poured so much hard work into. Including support for the PS5 Pro he was preparing to release next year.
The community used to be a group of talented researchers, but he's frustrated it's diluted into participants who aren't aligned with his values and don't even understand the hacks they produce.
I don’t know if he’s mad AI scooped a bug? Or that LLM slop kiddies don’t pay attention to that something is already known?
But I guess Sony being a gatekeeper wasn't a gatekeeper enough for certain regulatory agencies.
Sounds like he is salty that somebody found an exploit using LLM that he found manually (which probably took a significant amount of time.) I can partly understand it, but I mean that's also just the game that somebody else might find an exploit, LLMs just make it easier. LLMs finding bugs is not a bad thing, just sucks for enjoyers of open source software in this particular case.
You can probably find more though.
This guy has used on working with people that understand the scene, it seems that they were in contact, they agreed on something and then the next day they did something different.
This is really important in the context of what happened and probably the cherry on top of the current "hacking" cake, with the bar being lowered so much that anybody can jump in with some minor skill and luck and get something just for themselves.
Having the money to pour into an LLM to find this tautologically means it won't have been a life-chaning amount of money, and does not engender support for the person that reported the exploit to Sony
Nope. He is salty because someone made public the secret exploit that Linux-on-PS5 apparently relies upon to bypass Sony's hypervisor protection. Now Sony will fix the exploit, and there will be no more Linux on the PS5 until another exploit is found.
> But it wasn't particularly secret if 'noobs' had access then?
And you persist.
To quote Dr Ian Malcolm:
"If I may... Um, I'll tell you the problem with the scientific power that you're using here, it didn't require any discipline to attain it. You read what others had done and you took the next step. You didn't earn the knowledge for yourselves, so you don't take any responsibility for it. You stood on the shoulders of geniuses to accomplish something as fast as you could, and before you even knew what you had, you patented it, and packaged it, and slapped it on a plastic lunchbox, and now [bangs on the table]"
Then again, its a silly illogical movie
No, he's salty that this last remaining hypervisor exploit is going to get patched, causing his PS5 Linux project to get wholly-fucked as now there will be no (currently-known) way to sideload the OS. Reading comprehension is very important here.
I can guarantee this post would not have been made had he not been the one to find that vuln first.
Just look at the iOS jailbreaking scene and how Apple repeatedly poached all the devs until there was no one left, killing it off well before LLMs.
> I am stepping away from the ps5 scene and stopping all my work on ps5 linux. After pouring my heart and months of my life into it, including plans to finish ps5 pro support and release in 2027, it's all down the sink.
> The scene used to be a group of highly talented researchers, but now it is just a bunch of noobs using LLMs and writing hacks they don't even understand. Slop kiddies found the only hypervisor bug left, which I had also found a while ago, and decided to report to Sony.
> I asked them to at least wait for GTA 6 to come out so that people would have the opportunity to legally purchase the game and also enjoy linux. They agreed to wait, but not a day passed and they decided to waste it instead.
I have no issue with people using them to do things they could already do themselves as an efficiency thing and if they check and understand the result.
Unfortunately that seems to be the exception not the rule and the amount of "one shot slop" has increased dramatically, it's even affecting the modding communities for games.
This is gonna be a mess that is going to take time to figure out and then even more time to clean up.
You shouldn't, unless you're producing a bunch of code you don't understand.
Like how drivers of monster trucks get a rush from feeling like the power of the machine is their own. Some users of LLMs exhibit the same kind of arrogance of being on the side of a powerful force, like the law enforcement or military. I imagine some gun owners get that rush too. When you take away the gun or the truck, suddenly they feel vulnerable.
That wasn't even the claim...
Person 2 uses an LLM and finds the same exploit.
Person 1 asks Person 2 not to report it and collect the bounty until GTA6 is released. Person 2 agrees.
Person 3 also finds the same exploit independently.
Person 2 discovers that Person 3 has found the exploit. Person 2 decides the cat is out of the bag and submits it to Sony while they still have a chance.
Now the community is angry that Person 2 didn’t sacrifice the bounty. PS5 Linux effort seemingly falls apart in response? Departing developer directs community to be angry at Person 2, who is taking time away to be with their critically ill mother.
Honestly I can’t blame Person 2. They earned the bounty and played by the rules of the bounty program. The PS5 Linux dev who abandoned the project and started deleting things is entitled to do so, but blaming Person 2 for the crash out is too much.
Yeah, nothing like the hard work of typing "look at this binary and find a bug" The sweat, the tears it must have taken!
The link is not loading for me, so I could not access the article.
It's an issue that the dev attempted to collect the bug bounty, AI or no
Grandma was always a broken record with that stuff. The family would sit around that table, apparently, gabbing about nothing, and everything, just staring into a raw pizza, pulling and stretching it, starting over, living with their hunger, for a flawed process to bake slowly.
These days, fresh pizza is 10 seconds away, it's always identical and we never have to share. It's hydrated, eaten, and in the trash by the time I am onto my next attention, always perfect, always on time, always identical. I don't think about this much, but I sometimes really feel pity for what the old timers suffered through, all those ridiculous, pointless wasted interactions and delays, sitting there for what felt like ages, for a random pizza shaped thing.
I dont get it.
That would indeed be incredibly demoralizing, even crushing. Quite a dick move.
Now that said, I imagine it was only a matter of time anyway until Sony found/fixed or someone else did the same thing. It's just a different world now.
As much as I'd love a non locked down PS5, anyone buying one knows what they're getting. If you care about user empowerment, PC (Valve hardware, etc) is the place to put your money and time. Sony is actively hostile toward you and wants you locked down, and trying to fight it with exploits is destined to be a nasty cat and mouse game. Go with a vendor that is more aligned to your values.
Not to mention how the code can then be sourced by an AI model in an instant without any credit.
On the other hand, it’s been clear for a while that software as we knew will end up at a close to 0 marginal value.
Of course gatekeeping can also be toxic. But anything can be toxic if applied too much. You can die from water poisoning, that doesn't mean water is bad. It means you need to not overdo it. I've seen what a lack of gatekeeping has done to many communities I used to enjoy (including programming), and I think it's high time we did more gatekeeping. We don't want to overdo it, but right now we are doing far too little and that needs to change.
> Slop kiddies found the only hypervisor bug left, which I had also found a while ago, and decided to report to Sony,” the modder said on social media. “I asked them to at least wait for GTA 6 to come out so that people would have the opportunity to legally purchase the game and also enjoy linux. They agreed to wait, but not a day passed and they decided to waste it instead.”
So what has really happened is the LLMs have lowered the participation floor for this space enough the dynamics are changing. The new comers would rather have a few dollars vs. the founders who would rather have a project. It’s likely the projects days were numbered either way because Sony could also just take a frontier LLM and examine any released installer for the project and reverse engineer and bug.
How old was this bug? How much energy has been devoted to RE of this proprietary console? Not enough, apparently.
This vulnerability will still exist in older versions. The project can still continue development of Linux on PS5 and, eventually, another exploit will be found that enables the installation on a later version.
Frankly, based on the language used, a resignation over this seems to have a lot more to do with the person being upset that LLMs are lowering the bar for entry. They seem more upset that their skills aren't as useful as they were.
It seems like the reputation as a PS5 hacker was the objective, not getting Linux running on PS5.
Hopefully "people" doesn't mean scrapers
It's just boring. And the people that crow about "their" accomplishments are tiresome.
If one user could have found this using AI. Then I would imagine anyone else could have found it.
Right, including Sony. AI finding security flaws is very good in general, but one downside is that it will become easier to make "secure" devices that are hostile toward their owners.
People are still fixated on using AI to produce code (to reduce salary costs/dev time) rather than using it to audit bugs in one own's code, which they are better at.
The latter has "always" been obvious to me.
Ever since consoles became moving targets there's been deliberate gatekeeping - specifically, drip-feeding of bugs - to maximize the chance someone can actually use them to break DRM and install Linux. This relies on the fact that most people do not want to have to become FreeBSD kernel experts in order to install non-PlayStation software on their PlayStation. But if everyone is vibe-hacking their PS5s then none of this logic applies. Any bug Claude can find is one Sony also knows about and will get patched, possibly before you even release an exploit for it.
How this ultimately plays out depends on if it's even possible to write software without bugs. Maybe this reaches a new equilibrium where people are paying Claude to vibe-code jailbreaks - as I'd initially hoped. But it's equally as likely that this winds up reinforcing DRM rather than weakening it, for a few reasons:
1. Anthropic's AI safetyism culture encourages the prohibition of vibe-coded jailbreaks. The fact that the model runs on a server and people are spying on your chatlogs means Anthropic has actual knowledge of who is actually using their service to find PS5 hypervisor bugs. Letting Claude break DRM is legally risky; DMCA 1201 implies the only lawful way to break DRM is for you to find your own bugs. So it's probably not going to be long until everyone vibe-coding jailbreaks will get banned.
2. Sony will not be getting banned from these services, they will get trusted access as they're big enough for Anthropic to sue if it gets misused.
3. The attack surface of the thing you have to actually compromise to get code execution on any locked-down system is really small. The Xbox 360 had a 15+ year gap[0] of no softmodding because they'd isolated all the memory protection into a hypervisor. Apple learned the same lesson and iPhone jailbreaking went from incredibly commonplace to "if you know how to do it someone at Zerodium will hand you a million dollars to write spyware with it".
[0] AFAIK, the only two actual softmoddable bugs on Xbox 360 were the King Kong hack right at launch, which got patched in like a week, and that BadUpdate thing last year.
I'm sure you do realise you're talking about yourself?
Is the “power of the community” to narc on themselves to the corporations that they are building their community around, only to have the corporations destroy the community’s efforts?
Because that’s what happened here. This isn’t a case of gatekeepers self selecting out.
This is a case of slop kiddies making it impossible for him to continue to do his work by reporting it to Sony for personal profit and having them lock down the exploits he was using.
If that’s the power of the community, if that is the future, then he is right and you are wrong.
This is not a case of a gatekeeper slowing down development. This is a case of the slop kids making it fucking impossible to continue development.
This is the worst outcome and your brain is so cooked by AI that you’re seeing it as the opposite.
Where is the AI generated Linux kernel for PS5?
What lockdown corporate product have the slop coders managed to put Linux on? Anybody vibe cracked an oculus headset or Apple Vision Pro or the Xbox?
Some individual profited and the community ended up with less.
Everyone hates gatekeeping until they don't. Watch quality go down, issues increase, project direction become muddied, and suddenly people will be calling for more gatekeepers!
AI skynet is currently winning the war.
LLMs have taken over so many projects already. If I were young, would I want to contribute to projects maintained these days via AI slop? I would not find that interesting at all.
It seems more like a spirit drainer for the experienced maintainers who have to deal with the onslaught.
I suspect we’re going to see much more strict projects with fewer allowed contributors going forward.
Though on the upside, an experienced dev can use AI to become more productive, so perhaps they will be less dependent on contributions.
I might be showing a lot of unc energy here, but if you can't afford a raspberry pi or something to play with linux, or a used pc, gaming and having a playstation 5 should be de prioritized for a bit while you get your life together.
Your comment is framed as though Linux usage and what you deem an unstable lifestyle (lack of monetary means in your judgment) are mutually exclusive. Open-source software is for everybody, including the messy or disenfranchised. Would you frame a kid who got a PS5 for Christmas who doesn't have an allowance or job as a failure because they don't have $100 to spend on a Pi? It sounds like you just look down on people playing video games even when they want to use the very thing you're implicitly deriding to do the thing that you think they should be doing... doesn't seem to make a lot of sense.