Is open source is dead? It seems like too much of a security risk>Software produced by the National Health Service has previously been made open-source and listed on GitHub because it is created with public money. This allows other organisations to build upon it and make better services more cheaply without duplicating effort.>But NHS England has issued new guidance to staff, which has been shared with New Scientist, that demands existing and future software be pulled from public view and kept behind closed doors. >“All source code repositories must be private by default. Repositories must not be public unless there is an explicit and exceptional need, and public access has been formally approved,” says the new guidance. The deadline for making code private is 11 May.>Last month, an AI created by Anthropic called Mythos was widely reported to be capable of discovering flaws in virtually any software, potentially allowing hackers to break into systems running it. NHS England’s guidance specifically points to Mythos as the cause for the new measures. >“Public repositories materially increase the risk of unintended disclosure of source code, architectural decisions, configuration detail, and contextual information that may be exploited – particularly given rapid advancements in Al models capable of large-scale code ingestion, inference, and reasoning (e.g. developments such as the Mythos model),” it reads. “This red line establishes a default-closed posture for code while the organisation assesses the impact of these changes and ensures that any public publication of code is a deliberate, reviewed, and justified decision.”
>>108733392Always has been.
Would adding difficult captchas mess with the AI’s? Or at least make it harder for them to read thousands of code pages?
>>108733392the only thing that open source makes sense for is low stakes hobby stuffmaintaining OSS is a thankless job, infinite time sink and you just get hurled abuse at you non stop
>>108733392They sold all the personal data to DeepMind btw.
>>108733392A more likely reason is to give the code to some American company for pennies so they can make billions in profits at tax-payer's (and OS) expense.
>>108733421I can't think of a captcha that exists that would stop one of these llms with computer/browser control
>>108733465Should at least slow it down
>>108733421I made a custom script where the user has to solve Bitcoin hashes for a few of my toy sites. my boy traffic dropped significantly.
