77
Collaborative project to document AI-contaminated FOSS (www.theregister.com)
submitted 6 months ago by to c/opensource@programming.dev
7 comments fedilink hide all child comments
 

The splendidly-named "OpenSlopware" was, for a short time, a list of open source projects using LLM bots. Due to harassment, it's gone, but forks of it live on.

"OpenSlopware" was a repository on the European Codeberg git forge containing a list of free software and open source projects which use LLM-bot generated code, or integrate LLMs, or which show signs of "coding assistants" being used on the codebase, such as pull requests created or modified by automated coding tools.

However, its creator – who we are intentionally not naming or tagging here – received so much harassment from LLM boosters that they removed the repository, and indeed their Bluesky account, stating that they would withdraw from social media for a while. Now, if you try to visit the original URL, you will receive only a 404 message.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 6 months ago* (last edited 6 months ago) (1 child)

Ah, damn. Bitwarden has Agents.md. That doesn't really fill me with confidence, and it's the most critical software I use.

I need to update my threat model, I've trusted them quite a lot to the point of using Bitwarden for MFA for less-important services (so it's not really MFA, since both my password and MFA token is in Bitwarden, but it's super convenient), and only had Yubikey for my Bitwarden account, so as long as the app itself isn't compromised I should be good (and Bitwarden has a pretty good track record as far as I know), but if they are going to start vibe-coding their tools then it's probably time to move to a proper MFA.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 4 points 6 months ago (1 child)

    I've been using Keepass2 (not XC, which also has AI issues) for ages and it still works great for me. It's older, it's ugly, but it runs fine under Linux with a little effort, plugins and all, on mono alone without even requiring wine. I can't assert that it's completely AI free, but it's actively maintained and doesn't show any obvious sign of enshittification yet, AI or otherwise.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 6 months ago (2 children)

    If I'm not mistaken, Keepass doesn't have cloud sync, right? That's a pretty important feature for me, and a reason why I went with Bitwarden, even though Keepass is probably better.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 6 months ago (1 child)

    Version 2 has some synchronization features. There are also plugins available.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 6 months ago*

    Oh, nice. A sync with ProtonDrive, that looks promising.

    I don't trust myself enough to backup my passwords on something self-hosted, but ProtonDrive might actually be reasonable. I'll look into it, thanks! And I sure don't want to use stuff like GDrive or OneDrive.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 6 months ago

    I'm not sure about "native" cloud sync, but Keepass2 (non-XC) has a very robust and reliable "Synchronize" function, which can be executed manually as needed, or set up with triggers (recommended) to Synchronize the database file with another database file. This is actually the reason I specifically still use Keepass2 and refused to migrate to Keepass-XC despite the nicer interface and better code, because it dropped this functionality.

    If that other, synchronized database file happens to be in a cloud somewhere, Keepass2 doesn't know or care, it just makes sure all the entries in it are synchronized with the ones in your open database. It's up to the cloud software to make sure it gets synced to other computers, but that's fine, that's what they're for.

    This is what I have used for cloud sync since day 1. It used to be Dropbox. Now I use both NextCloud and Syncthing to keep many copies of my password database scattered around my digital universe.

  • permalink
  • fedilink
  • source
  • parent