They also scraped some of my assembly code of which I’m pretty sure the latest version has a major bug. Let’s hope they don’t use these models to program my new PC’s bios.

The right move is to private all repositories you are uncertain of that you want them to be preserved forever in an AI training set.

I just followed the opt out link and they’re making you open a public issue with a Markdown list with all your repositories you want removed.

Surely there has to be a better way to do this (probably the point).

Also why are they storing 4.71 TB in a Git repo? How are they going to deal with removal requests?

EDIT: It seems like they’re manually responding to the issues, wtf? There’s a perfectly fine GitHub auth system that they could use to verify everyone’s GitHub account / repository ownership

EDIT 2: This is apperently a collaboration between Hugging Face and ServiceNow, why is my companies IT ticketing system scraping all of GitHub?

Roko’s basilisk

My list includes GPL licensed repo’s

It doesn’t seem that way. My list contains several repositories that don’t have licenses, even some with GPL.

No, it seems to only be a subset of public repo’s.
I have like 65 repo’s and only 13 were scraped. I don’t get why they specifically scraped those though. They don’t have the most stars, they aren’t the oldest or newest, not the ones with the most forks, nor do I see a pattern based on programming language.

Too many people gloss over the fact how insane it is that some people genuinely believe non-believers burn forever in a magic post death torture world. Like how can someone think that while talking with someone, and be like, aw sucks for them, glad I submit to this ancient chain email creepypasta.

It still baffles me when I realize someone thinks like that.

The dev of Tesseract is part of the .world mod/admin team.

EDIT: Ironically, just like you.

What do you mean? I’m not part of the .world team, I only mod a few communities that are on there.

The banner at the top of their site tells a different story

Cryptocurrency projects are no longer allowed. View change

But that was done by the dev of Tesseract, not by the people running Lemmy.world

I don’t like these blanket bans, are they going to ban torrent clients next?

Yes

It seems none of the communities I mod have made the list this time

self-training is possible when using something external to validate the results

I don’t think the cost of hosting the repositories itself is the issue, more the legal problems and the fact that real projects get drowned out by the noise

It seems like the marketing cooperated on writing the incident report, but I felt it was still interesting to share considering the importance on public perception and what it tells about OpenAI’s PR strategy

Huggingface actually had to use an open model to analyze the attack because the guardrails of commerical API’s caused issues.

When we started the log analysis, we first used frontier models behind commercial APIs. This did not work: the analysis requires submitting large volumes of real attack commands, exploit payloads, and C2 artifacts, and these requests were blocked by the providers’ safety guardrails, which cannot distinguish an incident responder from an attacker. We ran the forensic analysis instead on GLM 5.2, an open-weight model, on our own infrastructure. This had a second benefit: no attacker data, and none of the credentials it referenced, left our environment.

Security incident disclosure — July 2026

And Chinese AI like Deepseek and GLM

It could also be a way to encourage more regulation to push out competition with compliance cost