GrapheneOS is currently defending its use of AI coding tools on Mastodon against complaints by various accounts claiming to be users.

We do not understand where you're coming from or why you're so incredibly angry with us. It's not justified and does not make sense.

you are viewing a single comment's thread
view the rest of the comments
[–] 31 points 16 hours ago (15 children)

It's funny because anyone seeing this as black and white clearly hasn't ever opened an IDE.

  • source
  • parent
  • hideshow 15 child comments
  • [–] 3 points 3 hours ago* (last edited 3 hours ago) (2 children)

    Ssshh…Most of those having a knee-jerk "AI BAD! YOU BAD!" reaction don't have any clue WTF an IDE is, how code completion works, nor the fact that by most metrics 95%+ of code now has "AI" in the chain…and has had that for YEARS.

    https://github.blog/news-insights/research/survey-ai-wave-grows/

    https://survey.stackoverflow.co/2025/ai

    OMGWTFBBQ!

    Here's a crazy idea…how about instead of "AI BAD! ME HATE AI" how about some nuance? Assume ALL software in 2026 has had AI assistance, and review it on its merits.

    As for the devs at GrapheneOS directly…why were you (the general you) trusting them before? Humans can be plenty dicey in ways that affect code all on their own.

    https://www.reddit.com/r/PrivacyGuides/comments/13s7mv3/why_i_deleted_grapheneos_louis_rossmann/

    https://factually.co/fact-checks/technology/louis-grossman-grapheneos-drama-c1f2ae

    Supposedly wonderful "human artisanal code" has plenty of fuckery.

    https://en.wikipedia.org/wiki/XZ_Utils_backdoor

    https://thehackernews.com/2024/03/urgent-secret-backdoor-found-in-xz.html

    https://simonwillison.net/2026/Mar/31/supply-chain-attack-on-axios/

    https://www.hivepro.com/threat-advisory/axios-npm-supply-chain-attack-what-you-need-to-know/

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 hours ago (1 child)

    Supposedly wonderful “human artisanal code” has plenty of fuckery.

    These are supply chain attacks and in the case of xz utils, the attacker had gone to extreme lenghts to hide the attack from a well-meaning, good-hearthed but overworked and burnt out solo maintainer.

    To compare this to bugs that people unwittingly introduce in normal human-written code is not sincere.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 hours ago*

    Very well. Here -

    https://www.debian.org/security/2008/dsa-1571

    https://www.finnie.org/2024/05/13/i-discovered-the-debian-openssl-bug/

    That's the thing about "pure human slop": it doesn't need to be malicious to be catastrophic.

    The second link is particularly salient - kills the "supply chain attacks are special" argument because it is precisely about "unwitting bugs in normal human-written code just happen"

  • source
  • parent
  • [–] 41 points 13 hours ago* (last edited 13 hours ago) (11 children)

    I've been a programmer for two thirds of my life up to this point. I don't see how the machine that generates code that must be assumed to be broken, and statements about said code that must be assumed to be wrong, until both have been manually verified, because the "hallucination" issue is inherent to the design of LLMs and cannot be solved, is supposed to make my life easier. Especially since a well known problem in computer science is that writing code is more fun than reading it.

    If you're using AI for code generation, I hope you like reading code.

    If you're using AI to learn a repo, I hope you're prepared to fact check everything it tells you.

    If you're using AI for code review before merging a PR, fucking yikes. What made you think the sycophant machine that once told users a soggy cereal bar was a great business opportunity and cannot even transcribe McDonald's orders correctly was suitable for that purpose?

    If you're telling yourself it's okay because there's a human in the loop, please read some studies about decision fatigue and consider that increasing the number of critical decisions a person must make per day, while giving them a suggested answer that's right 90% of the time and catastrophically wrong the remaining 10%, and the only way to tell the difference is to read in depth, might not have the desired effect. Especially if the human in question is then put under time pressure.

    And all that is before I go on a five paragraph rant about the ethical transgressions of every major AI company.

    It's pretty black and white for me.

  • source
  • parent
  • hideshow 11 child comments
  • [–] 7 points 12 hours ago* (last edited 12 hours ago) (8 children)

    The fact that it isn't perfect is the grey. And sure, it has a lot of problems but not only is it still useful anyways, but those problems are being ironed out. They probably won't disappear completely but the tech is already miles further than what we had 2 years ago.

    To make you understand what I mean by black and white, you have a user that put "AI is evil" in big bold letters in the comments. The hate is almost cult like for part of the population, and imo, it's mostly because the media tells them to be mad.

    Most of it depends on the task in any case. I don't work with massive code bases and it doesn't take long reading through a few scripts, running it and checking the output. The people I know that do work with huge code bases are using it as well, but I can't really talk for them either. They don't hate it tho.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 2 points 2 hours ago

    The fact that it isn’t perfect is the grey.

    And the fact how it is used in practice, actually, in reality, is the very dark grey that some people call "black" for better clarity. The fact that you can use a large butchers knife for practical things does not mean that entering a primary school with one is the right thing. What are the actual intentions for grabbing that tool?

  • source
  • parent
  • [–] 7 points 7 hours ago* (last edited 7 hours ago)

    The person who put "AI is evil" in big block letters is objectively correct. See homes getting claimed under eminent domain to build power lines for datacenters, electricity prices for consumers rising as service quality gets worse, and water usage to the tune of millions of gallons per datacenter per day. See companies buying rare books in bulk, cutting them apart so they can be scanned faster, and not publishing the scans, literally destroying culture so they can have one more scrap of training data guaranteed to be free of slop that their competitors don't have. See companies operating web scrapers that deliberately evade every block that website owners try to use to stop them from reading their sites, and then scraping so many different pages so frequently that it's indistinguishable from a DDoS attack, hosting bills skyrocket, servers crash, indie webmasters pay the price for corporate greed. See xAI operating natural gas turbines on the property of their datacenter for extra electricity in flagrant violation of the Clean Air Act, spewing toxic smoke into the air and generating powerful, inaudible infrasound vibrations that have been linked to everything from nausea to irritability to hearing loss to seizures. See Anthropic treating Minority Report as an instruction manual. See how ChatGPT use affects test scores. See AI psychosis. See chatbot-induced suicides. See deskilling. See how little AI companies care.

  • source
  • parent
  • [–] 6 points 10 hours ago (5 children)

    I agree, it's just not reasonable to assert that a technology powered entirely by IP theft and climate change acceleration must be inherently evil.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 0 points 10 hours ago* (last edited 9 hours ago) (4 children)

    Sorry, I don't bootlick the copyright machine. Anyone with half a brain can see it's transformative. I don't get why collage is fine but AI isn't, it's just copyright mega corps and data brokers that smell blood in the water. All the data isn't even owned by the artist, you are fighting for universal records, not your local guitarist.

    For the climate aspect, it's mostly grid issues and corruption. It's laughable to blame AI when we have president pedo prostrating himself in front of oil companies and destroying renewable projects. We need regulations and all that on where they can be placed and how they get powered, but in the end, it's just software. I could use AI 8 hours a day for my whole life and I still wouldn't be close to the damage one ticket to Europe does. It's a scape goat being served by a corrupt pro oil lobby.

    Don't get me wrong, I know what datacenters entail with the amount of people they serve, but if you look at it at an individual level, it's a drop in the bucket, or it would be if they weren't using plane turbines. We need regulations to curb the stupidity, but it's doesn't make it all inherently bad.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 6 points 9 hours ago (3 children)

    Lol, "I know this is a legitimate issue, but if I creatively reframe it enough I can pretend it's not".

  • source
  • parent
  • hideshow 3 child comments
  • [–] -2 points 9 hours ago (2 children)

    I don't think the copyright thing is an issue.

    Climate wise, it's only an issue because of a corrupt administration, it's not a death blow to it. It's at the heart of it overblown by a reasonable measure imo.

  • source
  • parent
  • hideshow 2 child comments