open source bug bounty google pause ai submissions a mailbox overflowing with envelopes

Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions

October 5, 2026
Artificial Intelligence
Comment off

Google has paused new product vulnerability submissions to its open source bug bounty, the OSS VRP, after a “significant rise in automated submissions, the vast majority of which are not valid”. Supply chain reports and queued reports are unaffected, and Google promises an update in Q1 2027. We explain what is paused, why AI slop broke the model, how curl, HackerOne’s Internet Bug Bounty, Node.js and Intel got there first, and what it means for researchers and UK businesses.

Linux Enthusiasts See 10-Second Kernel Compilation Times on the Horizon

September 27, 2026
Linux
Comment off

Kernel compilation on a top-end Linux workstation now takes about 15 seconds, and Phoronix is betting on 10 seconds with next-generation AMD EPYC chips. We explain the LLM-assisted kbuild patches from Lorenzo Stoakes, the benchmark numbers on three machines, how the AI help was handled under the kernel’s rules, and when the work could land in Linux 7.4.

Debian Won’t Ban AI Code From Its Linux Distribution

August 31, 2026
AI News
Comment off

Debian’s developers have voted down a proposal to ban AI-generated code, adopting Marc Haber’s “Responsible Use of Generative AI” position instead. The outright ban failed its 3:1 supermajority at 0.560, with 425 of 1,045 eligible developers voting in General Resolution 2026-002. This analysis covers the eight ballot options, the full vote numbers, how Debian now compares with Gentoo, NetBSD, QEMU, Fedora and the Linux kernel, why enforcement and copyright arguments sank the ban, and what the decision means for contributors and for businesses running Debian-based systems.