<fjahr>
I think you mean "decrease the likelyhood" in bullet 4?
<fjahr>
Just fix it all doesn't seem workable if we want to still make progress on bigger projects and not lower the level of human scrutiy on each change, so I don't think that is acceptable. I would guess that moderation of these kinds of reports could be mostly automated though by checking new issues against existing issues that were closed with won't fix (or issues in the public repo you mentioned)?
tegila_ has left #bitcoin-core-dev [#bitcoin-core-dev]
tegila has joined #bitcoin-core-dev
tegila has quit [Changing host]
tegila has joined #bitcoin-core-dev
<dergoegge>
Yes, decrease
<_aj_>
dergoegge: hot take: have the AI prioritise them, and look through open issues/PRs for duplicates. any that are already reported, add any additional info project loupe found, and/or a generic +1. once that's done, make sure there are open issues/PRs for the five highest priority. as those get resolved, open new issues for the new five highest priority until they're all fixed/not-a-bug'ed.
<_aj_>
dergoegge: (prioritse == rank in importance from 1..100, not just "low/medium/high/critical". maybe should have a 2d severity covering both difficulty-to-trigger/impact-when-triggered)
pzafonte has joined #bitcoin-core-dev
pzafonte has quit [Ping timeout: 245 seconds]
jonatack has quit [Ping timeout: 268 seconds]
PaperSword has joined #bitcoin-core-dev
pzafonte_ has joined #bitcoin-core-dev
PaperSword has quit [Client Quit]
___nick___ has quit [Ping timeout: 245 seconds]
___nick___ has joined #bitcoin-core-dev
jonatack has joined #bitcoin-core-dev
jonatack has quit [Ping timeout: 256 seconds]
<sipa>
github down for everyone?
<brunoerg>
yes
<_aj_>
only mostly dead, which means slightly alive
WizJin has joined #bitcoin-core-dev
twistedline has quit [Remote host closed the connection]
twistedline has joined #bitcoin-core-dev
_flood has quit [Ping timeout: 273 seconds]
deadmanoz has quit [Ping timeout: 245 seconds]
deadmanoz has joined #bitcoin-core-dev
bugs_ has joined #bitcoin-core-dev
adil has joined #bitcoin-core-dev
adil has quit [Client Quit]
l0rinc has joined #bitcoin-core-dev
jonatack has joined #bitcoin-core-dev
maflcko has quit [Remote host closed the connection]
maflcko has joined #bitcoin-core-dev
flooded has joined #bitcoin-core-dev
ghost43 has quit [Ping timeout: 252 seconds]
ghost43 has joined #bitcoin-core-dev
_flood has joined #bitcoin-core-dev
flooded has quit [Ping timeout: 241 seconds]
jerryf has quit [Remote host closed the connection]
memset has quit [Remote host closed the connection]
andrewtoth has quit [Remote host closed the connection]
andrewtoth has joined #bitcoin-core-dev
memset has joined #bitcoin-core-dev
jerryf has joined #bitcoin-core-dev
l0rinc has quit [Quit: l0rinc]
andrewtoth has quit [Remote host closed the connection]
andrewtoth has joined #bitcoin-core-dev
l0rinc has joined #bitcoin-core-dev
l0rinc has quit [Client Quit]
<nkaretnikov>
_aj_: agree. the only question is who is going to pay for all these tokens, especially if the volume grows over time
<nkaretnikov>
also, it would only matter if ai is able to get these into a mergeable shape, so that when a maintainer opens one, it’s only necessary to click on the merge button most of the time
<nkaretnikov>
another thing you could potentially do is to add a claude.md or an equivalent file that would be picked up by ai (that these reporters use) that would instruct on what issues not to report. this will hopefully prevent people from submitting the same issue 20 times that you have no intention of merging anyway
WizJin has quit [Read error: Connection reset by peer]
l0rinc has joined #bitcoin-core-dev
WizJin has joined #bitcoin-core-dev
<achow101>
dergoegge: I think we should just open issues for them, even if they never get fixed or get closed as won't fix. Reporters need to be looking through previously reported issues before opening a new issue and stop opening duplicates.
<jonatack>
achow101: agree
jonatack has quit [Ping timeout: 244 seconds]
WizJin has quit [Quit: Leaving]
smartin has joined #bitcoin-core-dev
<lightlike>
achow101: I dont think that is the issue: if we open 100 issue for all of them in one go, there will be almost as many AI-generated PRs by new contributors / drive-by AI bots etc. - who is going to review all of these?
<achow101>
lightlike: close all those prs for violating the ai policy
<achow101>
and make drahtbot more aggressive and closing things
<sliv3r__>
can we maybe group them in one big issue by topic and severity, and hide the details under <details>? Idk if github has a max text lenght in descriptions.
<lightlike>
I think I'd prefer a release in batches (by priority) to that.
<sliv3r__>
I agree with opening issues for them, they serve also serve as documentation
___nick___ has quit [Ping timeout: 256 seconds]
jonatack has joined #bitcoin-core-dev
PaperSword has joined #bitcoin-core-dev
<l0rinc>
dergoegge: dergoegge/loupe-bitcoin-core-public#1 is already worked on in https://github.com/bitcoin/bitcoin/pull/35752 (just converted to draft because of review, will push an update soon)
<corebot>
l0rinc: Error: That URL raised <HTTP Error 404: Not Found>
jonatack has quit [Ping timeout: 247 seconds]
<l0rinc>
Agree with achow101, the Red Team also has a lot of findings that we're reviewing, most of them seem minor, but real bugs, we should eventually fix most of them. We're already prioritizing them with other AIs, but if we only fix the serious ones we'd reveal which ones we consider serious, so I still think we should fix most of these one by one. Also, serious vulnerabilities are usually built by chaining many simple ones, so we shouldn't neglect
<l0rinc>
them just because they're not imminent threats. I expect capable AIs to be able to chain the minor findings very efficiently, so I think we should prioritize fixing and reviewing them.
afiore has joined #bitcoin-core-dev
Guest22 has joined #bitcoin-core-dev
Guest22 has quit [Client Quit]
afiore has quit [Remote host closed the connection]
___nick___ has joined #bitcoin-core-dev
afiore has joined #bitcoin-core-dev
Guest52 has joined #bitcoin-core-dev
Guest52 has quit [Ping timeout: 245 seconds]
PaperSword has quit [Remote host closed the connection]
<pinheadmz>
think i need a restart here, looks like a cache error?
<l0rinc>
I'm still running some benchmarks to fine-tune the thread count, but the end result is very simple now that the machinery was already committed earlier.
jonatack has quit [Read error: Connection reset by peer]
jonatack has joined #bitcoin-core-dev
jonatack has quit [Read error: Connection reset by peer]