Google pauses open-source bug bounty over AI slop submissions.
The OSS VRP — which paid out for bugs found across Google’s open-source ecosystem — will be frozen until at least next year. It’s slop’s fault: the pause is down to a “significant rise” in AI submissions, “the vast majority of which are not valid.” Linux has been suffering from a similar problem.
TL;DR
- Google's OSS VRP is temporarily suspended.
- The suspension is due to a large number of invalid bug submissions created by AI.
- The program will remain frozen until at least next year.
- Linux is facing a comparable problem with AI submissions.