The simple observation:
The #curl project is getting DoS‘ed by security researchers.
No mal intent, but driven by stock/work market evaluations.
Example: Aisle has shown its value by the curl CVEs claimed and was now bought by Cohere, presumably a good deal for both companies.
Economically reasonable behaviour for both. The FOSS projects are the roadkill, though.
All reporters have similar motivations, down to individuals improving their personal market value.
RE: https://chaos.social/@icing/117460774409401144
One effect of using LLMs in code that I have readily observed in my own workday is the DDoS effect, where it’s much, MUCH cheaper for various unrelated parties to use LLMs to generate bug reports—and sometimes “proposed solutions”—but it costs much, much more for maintainers to wade through the voluminous reports to figure out which are actually substantial.