freenode

Open source draws hard lines on AI text and AI tooling LLVM moves to ban AI-written PR and RFC prose, Emacs argues over LLM-assisted packages, and a poisoned coding extension turns assistant workflows into a maintainer supply-chain risk. freenode.net/article/open-so…

Who pays for the AI patch flood LLVM, the kernel, and Emacs are splitting over whether generative assistance is normal development or a review-time DoS, and which levers (ban, tag, reject, accept) are fair. freenode.net/article/who-pay…

Review bandwidth, not model quality, drives the AI contribution backlash From LLVM's proposed ban on AI-written PR text to the kernel dropping Assisted-by tags and GNU stalling LLM-assisted packages, maintainers are treating extractive AI… freenode.net/article/review-…

When intermediate CAs fail, language stacks discover they own the blast radius Flawed eMudhra P-384 intermediates forced same-week certifi purges and expedited Python, pip, uv, and ssl releases, exposing how package install paths outsource trust… freenode.net/article/when-in…

Projects draw hard lines as AI contributions eat reviewer time LLVM, the kernel, and Emacs are fighting the same battle: how to protect scarce maintainer attention without shutting out legitimate help. freenode.net/article/project…

No shared playbook: FOSS projects diverge on policing AI patches and prose LLVM, the kernel, Debian, and QEMU are inventing incompatible rules for AI text, attribution tags, and automated review just as maintainer bandwidth collapses under… freenode.net/article/no-shar…

When one CA's weak P-384 keys force everyone else to purge trust Flawed eMudhra intermediates triggered root removals, Python toolchain freezes, and a sharper fight over who should own the CA bundle. freenode.net/article/when-on…

BPF unwinding lets Rust and C++ keep their destructors New unwind instructions aim to make exceptions and RAII viable in BPF just as Rust is being pushed into parsing untrusted kernel-facing protocols, trading verifier complexity for safer… freenode.net/article/bpf-unw…

Virtual swap collides with what memory.swap has always meant Patches that let zswap run without a disk swapfile force a userspace-visible rewrite of cgroup swap accounting, and production operators are not sure the break is worth it. freenode.net/article/virtual…

Nixpkgs core team exits as packaging megaprojects hit the burnout wall A ten-month experiment in consensus leadership ends in attrition, while store rewrites and other distro policy fights expose the same unpaid-authority gap. freenode.net/article/nixpkgs…

Who owns the patch when the model wrote it? Kernel maintainers and Emacs developers are drawing the same line at once: undisclosed LLM help is not a process detail, it is a trust and philosophy problem. freenode.net/article/who-own…

HAWK break and McEliece caution feed doubts on PQC readiness A practical key-recovery result on HAWK and a BSI warning against new Classic McEliece deployments crystallize skepticism about several post-quantum candidates just as migration clocks… freenode.net/article/hawk-br…

Python free-threading races to define what race-free actually means PEP 805's ownership states and a push to document concurrency models collide as core developers try to freeze free-threaded semantics before ecosystem assumptions fracture. freenode.net/article/python-…

Free-threaded Python forces the concurrency contract into the open PEP 805's object-state checks and a push to write down distinct memory models mark the shift from GIL-hidden races to explicit programmer assumptions. freenode.net/article/free-th…

BPF unwind pads race to free Rust panics from the verifier's grip Multi-revision series for exception cleanup landing pads aim to let Rust Drop run on panic, while maintainers push back on verifier complexity and edge cases with tracing. freenode.net/article/bpf-unw…

Burnout Meets Harder Levers: Governance Strain Across Nix, IETF, and Fedora Volunteer capacity is collapsing just as projects reach for firmer moderation and process controls, leaving legitimacy questions unresolved. freenode.net/article/burnout…

When the maintainers leave the room From Nixpkgs to the TLS working group, open projects keep rediscovering that technical excellence does not scale care, conflict, or authority. freenode.net/article/when-th…

When the contribution is free but the reviewer is not: AI hits FOSS and standards culture An Emacs LLM-agent package, a wave of AI Internet-Drafts, and a Claude-led break of a NIST PQC candidate force the same question: is machine output… freenode.net/article/when-th…

Flatpak stack CVEs reopen the desktop sandbox trust question A burst of bubblewrap, xdg-dbus-proxy, and Flatpak fixes shows how setup-time symlink tricks and D-Bus filter gaps still undermine the isolation users treat as a boundary. freenode.net/article/flatpak…

An AI broke five of China's new crypto candidates in a day NGCC's first round of post-quantum submissions is collapsing under human and machine cryptanalysis, and the fastest breaks came from an AI running on its own. freenode.net/article/an-ai-b…