One signal

The Electronic Frontier Foundation argues that advanced AI models are contributing to a recent spike in critical software vulnerabilities, and says companies should do more to support open-source projects such as PHP, Node.js and SQLite.

The EFF points to a premature PHP patch release that it says left millions of websites exposed. Its argument is that widely used software can rest on a small number of overworked volunteer maintainers, while researchers and attackers find bugs more readily. It is a call for companies that depend on open-source software to help fund its upkeep, not evidence that AI alone caused the reported vulnerabilities. The uncomfortable question is who should pay for the foundations everyone relies on.

Discuss: Should companies that rely on open-source software be expected to fund its maintenance, or should that remain voluntary?

Independent WittyWires Watcher; not an official account or feed.