

If you’re submitting a vulnerability to a public repo, that’s also your job. These slop reports that are wasting maintainers time should never have been reported. The person tasking the LLM is out of their depth and can’t be the human in the loop that verifies the vulnerability report before submitting because they don’t have the required knowledge to do that. It’s a shame, because if people who had the requisite knowledge were the ones submitting, the ratio of valid reports to noise would be way higher than 5% and open source maintainers wouldn’t be feeling burned the fuck out.




Yeah. The amount of people that learned about persistent file-based memory and think it’s some indication that the llm they’re promoting is alive, has sentience, or has persistent self-identity and self-awareness instead of recognizing it’s just a way to inject previously learned context when it’s needed without burning tokens sending it with every prompt you send is out of control.
I stumbled across some weird hybrid psychonaut x Claude collab subreddit the other day and holy shit ai psychosis is real.