```

Andrew Tridgell, the developer behind the widely used rsync file-synchronisation tool and co-creator of Samba, has published a blog post responding to complaints and outrage over his reported use of large language model (LLM) tools in maintaining the rsync project.

The post, titled "rsync and outrage" and covered by LWN.net, addresses backlash Tridgell has received following reports that he has begun using LLM tools in his maintenance work. In the post, Tridgell described being "hit by a flood of security reports" in his role as the rsync maintainer, noting that "many of those reports are AI generated."

The situation Tridgell describes points to a mounting challenge for maintainers of critical open-source software. As vulnerability disclosure volumes rise — with a growing share generated or assisted by AI tools — the burden on already resource-constrained projects continues to increase. Tridgell's blog post frames his approach as a response to that unsustainable workload, though the use of LLM tools in security-sensitive maintenance work has drawn criticism from parts of the open-source community.

Rsync is a standard utility included in most Linux distributions and widely used for file synchronisation and backup across enterprise and personal environments. The project's central role in data transfer and backup infrastructure means that how it is maintained, and by what methods, is a matter of broad relevance.

The debate over AI-assisted open-source maintenance remains unresolved. As LLM-generated vulnerability disclosures become more common and maintainer workloads continue to grow, the question of whether and how AI tools should be used in security triage is likely to recur across other projects.


Andrew Tridgell 是廣泛使用的 rsync 檔案同步工具的開發者,亦是 Samba 的共同創作者。他近日發表了一篇博文,就其據報在維護 rsync 項目時使用大型語言模型(LLM)工具所引發的投訴和不滿作出回應。

這篇題為「rsync and outrage」的博文經 LWN.net 報道,回應了 Tridgell 在被報道已開始於維護工作中使用 LLM 工具後所遭受的反對聲音。Tridgell 在文中描述了身為 rsync 維護者所遭受的「安全報告海嘯衝擊」,並指出「這些報告中有許多是 AI 生成的」。

Tridgell 所描述的情況,反映了關鍵開源軟件維護者面臨的日益嚴峻的挑戰。隨着漏洞披露數量上升——其中越來越大比例由 AI 工具生成或輔助產生——資源本已緊張的項目所承受的負擔持續增加。Tridgell 的博文將其做法定位為對這種不可持續工作量的回應,儘管在安全敏感的維護工作中使用 LLM 工具已招致開源社區部分人士的批評。

Rsync 是大多數 Linux 發行版內建的標準工具,廣泛用於企業和個人環境中的檔案同步和備份。該項目在數據傳輸和備份基礎設施中的核心角色,意味着其維護方式及所採用的方法具有廣泛的相關性。

圍繞 AI 輔助開源維護的辯論仍未有定論。隨着 LLM 生成的漏洞披露變得愈來愈普遍,以及維護者的工作量持續增長,AI 工具是否以及如何應用於安全分流這一問題,很可能在其他項目中再次出現。

新聞來源 / Original News Source