Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • My prophecy is that in 3 years we'll see a complete reversal of this. Using GenAI to code will be the default and we'll see policies that put limits on human/artisan development. Possibly even projects that outright ban non-LLM development.
    by abc42
  • Yes, I'm sure that insecure slop projects like Artifactory will ban human contributions.
    by htltzp
  • I don't know the timeline, but I generally agree.

    I think history agrees too, i.e. machine code > assembly language > high-level programming language > prompts.

    by kdavis
  • At this point, I wouldn't be too surprised if LLMs just get better at "write understandable, maintainable code" than most developers are.

    For now, LLMs are still bad at it, but they're already at "competitive with humans" tier of bad. I expect them to get better.

    by ACCount37
  • Why would companies accept AI generated code, it they can generate their own (and review the prompt)?

    It's like predicting that when compilers become more popular, accepting binary contributions will become the default.

    by Viliam1234
  • Seems short sighted for an interim policy, to me. Why not just require clear and detailed disclosure of the use of said tools, to generate data for which to make a properly informed non interim decision?
    by SomeHacker44
  • The copyright issue is an important one. Under the current law, you don’t own copyright on the output of GenAI.
    by bpicolo
  • The interim policy you're proposing seems to have far different priors. The clearest indication of their stance is that they don't even want bug reports that have AI generate part of the text. You don't take a stand like that (imo) unless you've experienced some serious AI-related burnout.
    by CBLT
  • I suspect one of the principle reasons for the blanket decline is specifically that AI generated PRs are already responsible for a substantial uptick in the amount of work required to be done by maintainers. Engaging in discussions about those PRs may be more fulfilling and useful for the developer but it also then increases that work yet again manifold, so that would likely be highly counter-productive.

    What I don't understand is: if you, for example, are a heavily AI-using dev, who spots a problem in OpenJDK, and you use Claude to figure it out: ok, why can't you then write the solution and PR yourself? Write your own code to replicate the functionality that Claude did, in your own style. Have Claude explain why this fixes the issue (it probably already did) and test it. If it works, write your own explanation and submit it as a PR.

    I've done this a handful of times for smaller projects, in languages I'm unfamiliar with. Nobody complained because I didn't just copy the shit out of Claude, paste, copy the explanation, paste, and make a PR. I used Claude to increase my understanding, if even a bit and in a necessarily incomplete way, and did it myself.

    by ToucanLoucan
  • > short sighted for an interim policy

    Bit of an oxymoron, no?

    > just require clear and detailed disclosure of the use of said tools

    Do you mean disclosure of the use of tools used "privately to help comprehend, debug, and review" contributions? Or do you mean that they should not prohibit AI-generated contributions?

    If the former I wonder how useful the data would be, and if the latter, they are probably not (yet) willing to allow such contributions because of the mentioned risks: "to reviewer burden, to safety and security, and to intellectual property."

    by streetfighter64
  • All "interim" AI contributions to OpenJDK can and will be sued to make big money off of Oracle if those court cases don't go a certain way.

    This is ironic given how Oracle has bet almost everything on AI succeeding.

    by hajile
  • Because, as the FAQ section clearly states, the technical and management aspects are not the only ones. There are also legal issues, and until they are clarified or resolved it's best not to let code in that has the potential of causing problems later.

    We're talking about one of the biggest and most critical open source projects in the world, and unless there's some immediate urgency, it's okay to wait before taking on some risk.

    I should add that the potential loss here isn't big. For any fix, enhancement, or feature in the JDK, the cost of writing the code is rarely more than 10% of the total cost (which is easy to see if you compare the number of people involved in the project to the rate of code being added or changed), and the interim policy explicitly does allow the use of AI where it helps the most.

    by pron
  • Oracle determining how to add more sypware while not violating their own TOS
    by effnorwood
  • What spyware is there in the JDK? It's open-source, so you can look for yourself.
    by pron
  • How do you enforce this?
    by pizlonator
  • > How do you enforce this?

    It's not impossible - right now there are all these low-effort PRs. If the PR is indistinguishable from a normal human-written PR, that addresses some of their concerns.

    In any case, a rule or policy that can be worked around is not a reason to do away with that rule or policy.

    I mean, if we only ever catch 10% of murderers, do you really think it is reasonable to remove that law from the books?

    by lelanthran
  • Best effort, just like in the case of existing contributor agreements that demand you to be the copyright holder.

    Or like in the case of checking that free range eggs are in fact free range eggs.

    Or like in the case of Steam demanding AI disclosure, to the dismay of Tim Sweeney ...

    Let's hope the dismay increases over time.

    by htltzp
  • Subjectively; as 100% of all laws and rules throughout history have been enforced.
    by functionmouse
  • Blockchain.
    by asdfsa32
  • the same way they currently enforce authors own all copyright in their contributions, via the contributor agreement (OCA). in the real world, people aren’t going to intentionally sneak in LLM-authored code and potentially be legally liable.
    by rileymichael
  • As best as you can. I don't know why people keep asking this question, when the answer is obvious and exactly like all other contribution policies.

    In this case, this is coming from Oracle, which holds the OpenJDK purse strings, so being found in violation is also likely to have financial consequences for the violator.

    by stonogo
  • Am I not even allowed to use https://www.oracle.com/artificial-intelligence/enterprise-ai... ?
    by mrkeen
  • While I understand the caution, the current policy seems too draconian.

    It states in part:

    > Until that policy is in place, the Governing Board has approved this interim policy:

    > Contributions in the OpenJDK Community must not include content generated, in part or in full, by large language models...

    Note, this would exclude most spell checkers, as they often are LLM based. That said, they do soften this with the addition:

    > Q: Is it okay to continue using the spell-checking, grammar-checking, auto-completion, and refactoring features in my editor or IDE?

    > A: Yes, so long as they are not based on large language models or similar deep-learning systems.

    This addition will likely not help as most spell checkers are OS/IDE services and their implementation details are opaque to users.

    by kdavis
  • > Note, this would exclude most spell checkers, as they often are LLM based

    ?

    Like, what? What are you even talking about? Most spell checkers used by programmers are certainly not LLM based. Spell-checking has always been instant for like two decades. It's such a solved problem.

    by raincole
  • Why is it draconian? If we take Dec-2025 as the point where the models became good for real work (agreed by many), not even a year has passed since then. The world hasn't changed, and there are still many open legal questions.
    by xpct
  • I think it's pretty clear how this was meant, not sure why you feel the need to split hairs here. I'm certain the intention is this:

    - spell checkers: ok

    - '.getC' autocompleting to '.getColor()': ok

    - 'getC' autocompleting to 'getColor()' + five more lines based on preceding code and documentation: NO.

    by rf15
  • Is anyone using even a tiny on-device language model for spelling? For grammar, I could almost imagine it.

    But this also bans "simple" AI-powered auto-complete, like Zed's Zeta2 model. This is a very conservative model that rarely tries to propose more than a few obvious lines (at least in my use cases). If a developer accepts a three-line autocomplete that introduces a bug, that's kind of on them. Honestly, about the only thing that Zeta2 is good for is reducing the risk of RSI.

    To be fair, it's also their project, and I completely support their right to set whatever policies they want.

    by ekidd
  • > this would exclude most spell checkers, as they often are LLM based

    Who is using an LLM as a spell checker?

    by malfist
  • > Most generative AI tools, however, are trained on copyrighted and licensed content, and their output can include content that infringes those copyrights and licenses

    To some extent, it feels like the genie is out of the bottle on this. There's so much LLM-generated code out there, and I'm sure plenty of it could be argued to infringe a copyright or license (though I think the legal bar for counting as infringement is set too low), that there's no way to go back and undo it.

    That said, OpenJDK might be afraid that someone will decide to make an example of them because they are a high-profile target.

    by piinbinary
  • This makes sense.

    AI contribution is basically just "prompt + AI work". Even if you are okay with AI work per se, you should accept prompts (after reviewing them) and let your own AI generate the code (and then also review the code)... rather then accept an output of someone else's AI with an unknown prompt, that may or may not include an instruction to create a vulnerability.

    In the age of AI, the prompt is becoming the actual source code. Accepting AI-generated code would be like accepting binary code from unknown source.

    by Viliam1234