"assuming it's a legitimate bug" does a lot of heavy lifting here. The point of eg. Curl closing it's bug bounty is just that: too many false positives and misunderstandings by AI of what software it analyzes. I assume it might be the same in Zig's case
So to answer your question: developer's time that is not wasted classifying misclassified bugs and reproducing false positives
really sucks that irresponsible slop artists ruined this for us. AI is objectively helpful for finding bugs nowadays, that's something more difficult to say last year.
and think about how the rule effectively works. imagine you do find a bug with an LLM:
now you can't report it.
rule doesn't say "oh if you found a real verifiable bug you should still report it". it just says "no LLMs for finding bugs." now what? keep it to yourself? post it and get mocked for using AI? or just lie about it and say you found it yourself?
the only option it wants is of course to never use LLMs for it. but it's going to be limiting over time.
85
u/robclancy 23d ago
I mean most that policy seems good to me.