• 4 Posts
  • 227 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle




  • I don’t say the code isn’t sloppy and should never go live I. It’s state.

    I say: show me the app on the app store that you can download and use.

    We are talking about security issues in a reference implementation.

    We are not talking about an app. All this does is to spread fear and if this whole thing is not accepted by the Public because of this , what then? We land up in a privatisation scenario once again and then fuck privacy.

    This state of the Codebase is fixable, but stop talking about it like it would be a released app. It is not.








  • I though a while if i should answer to it. And this is so wrong, and dangerous, that i decided to do.

    First: Such licensing questions are part of my day to day Job. I will explain it to you like i explain it to first semester students:

    A LICENSE defines the terms under which a copyrighted work can be used, distributed and so on. It does not matter what the work is. A few relevant examples:

    • Beats: in the music industry there is a market for beats. If you take a 10 second beat and in-cooperate it in your own music without having a license for it, you are in violation of copyright law.
    • Paintings: You can not have a copyright on the concept of using paint to draw pictures on a piece of linen, you can not have a copyright on the concept of a specific object drawn on linen. You can have copyright on YOUR version of it. If somebody else takes your work, and only modifies it slightly (or for example, include it into a book, that is a copyright-able piece of work), without having a license for it… copyright violation

    So, this brings us back to our topic:

    There is no difference between sourcecode, music, paintings or writings for the purpose of licensing.

    So, as courts established, AI CAN NOT BE CREATIVE and ALWAYS based on other works. Therefore any AI generated Work is in itself are not protected by copyright.

    So, EVERY piece of code that is AI generated is free to go for any purpose, it does not fucking matter if there is a GPL 3.0 header in the file. AI Generated == Public domain.

    But: Projects use viral copyleft licenses for a reason. A company could just take the AI generated code, implement it, and if somebody has a problem with it an just shrug “It’s AI generated, it’s public domain”.



  • Ok, so, someone used an LLM do create changes. This new code is no longer under the project license it is, as you say, public domain.

    Move forward 400 commits. At what point is most of the code public domain?

    While correct you still missed the point completely.

    So,not make this as clear as possible: You can not license LLM generated code. Not under GPL, z lib or other copyleft licenses. It may work with public domain licenses.

    For MIT licensed projects there is not a big issue.

    For the kernel, have a look at the rules. AI models may assist only.


  • I can’t see that. Yes, the press is hyping Mythos in a complete brainless way, without understanding what the Mythos paper says.

    But just following the statements made by Anthropic that is a clear and factual representation.

    I actually recommend that people read the paper itself. And not just die cherry picked parts of the press.

    Also, I have seen 3 reported 0days found by Mythos in projects I (or my employer) contributes.

    That is not hype, those found issues are fact.

    If You made it to here in the comment, a little bonus. Let us debunk some press statements

    • Press: Mythos cheated, lied and is dangerous.

    • Fact: earlier versions did this. Anthropic describes the preview version as the most aligned model they have ever created, and cheating occured in less then 1% of cases

    • Press: Mythos is a security nightmare

    • Fact: in the wrong hands, it could be.

    • Press: Mythos exploited Firefox!

    • Fact: yes and no. It founds zero day’s in Firefox, but the extremely high success rate where an instrumented JS environment, and not the full browser