Seems like he’s been pushed into using LLMs as a way to cope with the deluge of LLM-generated security reports.

  • Mikina@programming.dev
    link
    fedilink
    arrow-up
    48
    arrow-down
    6
    ·
    edit-2
    2 days ago

    I can’t wait for companies to finally price out most of developers out of AI use, especially the FOSS ones.

    I just hope most of them won’t get too addicted to the tech crack they are getting free/cheap samples of currently, and will be able able to find back their motivation and skill to work without a feel-good dopamine machines.

    Also, lol at all the coments being like “if you’re 100% against the tech crack, you’re delusional. The cat is already out of the bag, it makes you way better at coding, if you use it responsibly!”

    The problem isn’t that it’s not somewhat good, the issue is that soon you won’t be able to afford it, while also being addicted and dependant on it. But I’m sure y’all are able to use crack responsibly and will be fiiine.

    • Bogus007@lemmy.zip
      link
      fedilink
      arrow-up
      7
      ·
      1 day ago

      If the project is understaffed and mistakes were made, wouldn’t it be more constructive to help maintain it or encourage broader participation, rather than dogpiling on a volunteer maintainer?

    • locuester@lemmy.zip
      link
      fedilink
      English
      arrow-up
      24
      arrow-down
      4
      ·
      2 days ago

      I run Qwen 3.6 27B at home. For “free”. It is extremely useful.

      My point being that I’m not going to be priced out of using it

      • EldritchFemininity@lemmy.blahaj.zone
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        1 day ago

        Don’t worry, they want to replace your hardware with a “cloud based computing solution” as well.

        When did that absurdity come back? I thought we killed the cloud computer nonsense a decade ago.

      • Mikina@programming.dev
        link
        fedilink
        arrow-up
        2
        arrow-down
        1
        ·
        2 days ago

        What hardware that needs? My issue with running local models was that it’s too much of a resource hog to be able to do gamedev on the same machine, and any sensible model needs pretty expensive hardware to just get a server for it. Especially with current prices.

        • AlteredEgo@lemmy.ml
          link
          fedilink
          arrow-up
          1
          ·
          15 hours ago

          Geforce 3090 with 24TB should be able to run a “Q5 version” of it. Maybe get a second older computer, or maybe you can run two cards in one PC.

        • locuester@lemmy.zip
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 day ago

          64GB unified memory. I run it (and a lot more) on a dgx spark, but a Mac mini would suffice also.

          You could prob run 4-bit version on a RTX card with 32g. Maybe even 24g. Like a 5090 or 4090 or such.

          So much info out there.

          • wewbull@feddit.uk
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 day ago

            Mac Minis top out at 48GB and are 1.8k when configured like that. It’s going to be at least $2k to buy anything that has a hope of running it at a reasonable speed.

            Running local isn’t free, but at least it’s just a single upfront payment.

            • Darkaga@lemmy.world
              link
              fedilink
              arrow-up
              2
              ·
              1 day ago

              The M4 Pro Mac Mini caps out at 64GB RAM. Whether or not Apple can sell you that SKU right now is a different question with the ongoing DRAM shortage.

      • GreenKnight23@lemmy.world
        link
        fedilink
        arrow-up
        5
        arrow-down
        5
        ·
        2 days ago

        qwen is garbage. it can’t even count the elements within an array of numbers.

        to be clear though, it’s not just qwen. all code models are fucking trash.

        • RamenJunkie@midwest.social
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          1
          ·
          1 day ago

          See, this is what people say when they say “people who can code” are doing good things with these LLMs.

          Why the fuck would you ask the model to count elements?

          Ask it to make a python script that will do the counting, then run the script.

          • GreenKnight23@lemmy.world
            link
            fedilink
            arrow-up
            1
            arrow-down
            5
            ·
            20 hours ago

            compare these two arrays and tell me what the difference is

            are these two arrays similar?

            are these not legitimate questions? sure I could do them in-code, but is it not faster to just ask it?

            See, this is what people say when they say “people who can code” are doing good things with these LLMs.

            first time I ever had a clanker insinuate my skill level is below their own. thanks for the chuckle.

        • bss03@infosec.pub
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          1 day ago

          Yep, while I don’t use them myself, I saw the output of the latest models at the beginning of May. While there are some “good” things in it, the vast majority of the output was unnecessary maintenance load or just wrong. And, while the person showing off the output claimed they couldn’t have written the code, I didn’t see anything particularly special.

          On top of that, I don’t believe the output of Qwen (or any other coding model) can be distributed without violating a large number of copyrights, so it’s entirely inappropriate for FOSS projects.

          • GreenKnight23@lemmy.world
            link
            fedilink
            arrow-up
            3
            arrow-down
            1
            ·
            1 day ago

            I don’t believe the output of Qwen (or any other coding model) can be distributed without violating a large number of copyrights

            I have a perfect example for that. I asked Qwen to write a simple python socket app. one for server and one for client.

            While I was reading through forum posts about python socket communication, I found a post from 8 years ago. same script. same variable names. same comments. word for word. line for line. the same exact script.

            so much for AI “not stealing content”.

    • COASTER1921@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      1 day ago

      Even if too expensive for FOSS devs the mega corps relying on their software will still be able to afford them to run their own security testing, feeding the bug reports back to the project. And with time the hardware and models are only getting more efficient (for a comparable performance level).

    • fodor@lemmy.zip
      cake
      link
      fedilink
      arrow-up
      1
      arrow-down
      2
      ·
      1 day ago

      And it may or may not be somewhat good. I think we’re seeing that shitty programmers use AI to write even shittier programs. And that will continue indefinitely.