JTI
@jti42@infosec.exchange
Everything in FOSS that isn't code. #isolveproblems #thisisreallygoodcoffee Sat on the Berlin wall the day it fell. From the walled in side. Sat on an Ambulance roof the day the bells rang. Earl grey, hot. #foss #opensource #llm #selfhosting #decentralized #distributedsystems #solar
infosec.exchange
Here's an interesting one around all the "no projects with the LLM taint wanted here" discussion, taking Codeberg as example:
Codeberg offers to host binary releases
Current (FOSS) software contains hundreds or thousands of individual works as dependencies in deep dependency trees
It can be regarded as nearly certain that a substantial amount of those projects will fall under the exclusion or problematic class as per the rules above
Once complied to a release binary those "tainted" works are often included in the binary and will thus be uploaded to the forge as a release.
Hence, the forge will be hosting ToS violating material on behalf of the project subjecting the otherwise possibly compliant project to possible sanctions.
Now what do we make of that thought experiment? And how do we resolve it?
#codeberg #llm #sca #foss #compliance #fossdrama #opensource #fossdrama #drama #aiassistedcoding
