Todd A. Jacobs | Pragmatic Cybersecurity<p><span class="h-card" translate="no"><a href="https://mastodon.social/@elementary" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>elementary</span></a></span> tl;dr I support your objectives, and kudos on the goal, but I think you should monitor this new policy for unexpected negative outcomes. I take about 9k characters to explain why, but I’m not criticizing your intent.</p><p>While I am much more pragmatic about my stance on <a href="https://infosec.exchange/tags/aicoding" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>aicoding</span></a> this was previously a long-running issue of contention on the <a href="https://infosec.exchange/tags/StackExchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>StackExchange</span></a> network that was never <em>really</em> effectively resolved outside of a few clearly egregious cases.</p><p>The triple-net is that when it comes to certain parts of software—think of the SCO copyright trials over header files from a few decades back—in many cases, obvious code will be, well…obvious. That “the simplest thing that could possibly work” was produced by an AI instead of a person is difficult to prove using existing tools, and false accusations of plagiarism have been a huge problem that has caused a number of people real <a href="https://infosec.exchange/tags/reputationalharm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>reputationalharm</span></a> over the last couple of years.</p><p>That said, I don’t disagree with the stance that <a href="https://infosec.exchange/tags/vibecoding" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vibecoding</span></a> is not worth the pixels that it takes up on a screen. From a more pragmatic standpoint, though, it may be more useful to address the underlying principle that <a href="https://infosec.exchange/tags/plagiarism" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>plagiarism</span></a> is unacceptable from a community standards or copyright perspective rather than making it a tool-specific policy issue.</p><p>I’m a firm believer that people have the right to run their community projects in whatever way best serves their community members. I’m only pointing out the pragmatic issues of setting forth a policy where the likelihood of false positives is quite high, and the level of pragmatic enforceability may be quite low. That is something that could lead to reputational harm to people and the project, or to community in-fighting down the road, when the real policy you’re promoting (as I understand it) is just a fundamental expectation of “original human contributions” to the project.</p><p>Because I work in <a href="https://infosec.exchange/tags/riskmanagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>riskmanagement</span></a> and <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> I see this a lot. This is an issue that comes up more often than you might think. Again, I fully support your objectives, but just wanted to offer an alternative viewpoint that your project might want to revisit down the road if the current policy doesn’t achieve the results that you’re hoping for. </p><p>In the meantime, I certainly wish you every possible success! You’re taking a <a href="https://infosec.exchange/tags/thoughtleadership" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>thoughtleadership</span></a> stance on an important <a href="https://infosec.exchange/tags/AIgovernance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AIgovernance</span></a> policy issue that is important to society and to <a href="https://infosec.exchange/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FOSS</span></a> right now. I think that’s terrific!</p>