Linus Torvalds says AI bug hunters have ruined Linux security mailing list (www.techradar.com)

Linus Torvalds has raised significant concerns regarding the influx of AI-generated bug reports overwhelming the Linux security mailing list. He highlighted that these reports, often redundant and non-specific, have made it nearly unmanageable, with researchers spending excessive time filtering duplicate findings instead of addressing real issues. Torvalds criticized the current trend among bug hunters who utilize AI to generate reports without truly understanding the problems, labeling this as “entirely pointless churn.” He urged researchers to shift their focus from merely submitting findings to contributing meaningful patches that can enhance the overall security and functionality of the Linux kernel. This situation reflects broader challenges faced by the AI/ML community in managing the quality and relevance of automated outputs. Similar reactions have been seen in other projects like curl and the Internet Bug Bounty Team, which have limited their bug bounty programs in response to an increase in low-value reports generated by automated tools. Torvalds' call to action emphasizes the need for a more thoughtful integration of AI in bug reporting, advocating for a collaborative approach where researchers leverage AI to build upon their findings rather than produce noise that detracts from genuine development efforts.