Merge pull request 'Add "Stolen training data" section and update headers' (#31) from stolen-training-data into main

Reviewed-on: https://codeberg.org/small-hack/open-slopware/pulls/31
2026-06-01 14:47:04 +02:00 · 2026-03-09 21:04:28 +01:00 · 2026-03-09 21:04:28 +01:00 · c640f26490
commit c640f26490
parent 4ca11b2682 56f551834c
1 changed files with 65 additions and 56 deletions
--- a/README.md
+++ b/README.md
@ -11,7 +11,7 @@ To Contribute, checkout our [`CONTRIBUTING.md`](./CONTRIBUTING.md).
 > [!Note]
 > This is a fork of a repo by the same name maintained by the @gen-ai-transparency org on Codeberg. If they make their repo available again, we will contribute back.

-* [Definitions](#definitions)
+  * [Definitions](#definitions)
 * [Tainted Software](#tainted-software)
  * [Browsers](#browsers)
  * [Command-Line Shells](#command-line-shells)
@ -41,6 +41,7 @@ To Contribute, checkout our [`CONTRIBUTING.md`](./CONTRIBUTING.md).
  * [Operating Systems](#operating-systems)
 * [Why not LLMs?](#why-not-llms)
  * [Legal Ramifications](#legal-ramifications)
+    * [Stolen Training Data](#stolen-training-data)
  * [Environmental Impact](#environmental-impact)
  * [Poor Code Quality](#poor-code-quality)
    * [Healthy and Safety](#healthy-and-safety)
@ -55,9 +56,9 @@ To Contribute, checkout our [`CONTRIBUTING.md`](./CONTRIBUTING.md).
 | sloperator | A person who uses AI prompts to generate anything, typically code or images.                                                          |
 | slopshop   | Company, Organization, or Group of sloperators working together to use AI to generate content.                                        |

-## Tainted Software
+# Tainted Software

-### Browsers
+## Browsers

 | Name    | Alternatives                                             | Evidence                                                                                   | Notes |
 |---------|----------------------------------------------------------|--------------------------------------------------------------------------------------------|-------|
@ -65,29 +66,29 @@ To Contribute, checkout our [`CONTRIBUTING.md`](./CONTRIBUTING.md).
 | Firefox | [LibreWolf](https://librewolf.net/), several other forks | [Blog post collecting details](https://alextheward.com/blog/mozilla_is_now_an_ai_company/) |
 | [Ladybird](https://github.com/LadybirdBrowser/ladybird) | | [President of company/core developer discussing Rust language adaption using AI agents.](https://x.com/awesomekling/status/2025898614631915708) [Associated blog post](https://ladybird.org/posts/adopting-rust/) |

-### Command-Line Shells
+## Command-Line Shells

 | Name | Alternative(s) | Evidence | Notes |
 |---|---|---|---|
 | [`nushell`](https://www.nushell.sh/) | [`elvish` shell](https://elv.sh), [`fish` shell](https://fishshell.com/) | [Integrated MCP server](https://github.com/nushell/nushell/tree/main/crates/nu-mcp), [core developer sets Claude as a co-author](https://github.com/nushell/nushell/commit/21a54d47a00f09e3710e08ee7624e7b4332dcb27) |
 | [`yash`](https://magicant.github.io/yash/) | `dash` shell, but there are no other major shells fully targeting POSIX | [Assigns and auto-reviews MRs with LLMs](https://github.com/magicant/yash/pull/217#issue-3699124790) |

-### Computer Graphics
+## Computer Graphics

-#### Photography
+### Photography

 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [RapidRAW](https://github.com/CyberTimon/RapidRAW/) | | From the README: "with the support from Google Gemini." Roadmap includes adding GenAI. |
 | [RawTherapee](https://github.com/RawTherapee/RawTherapee/) | Stick to version 5.12 | Use Copilot for review [PR7518](https://github.com/RawTherapee/RawTherapee/pull/7518#pullrequestreview-3348449593), [PR 7435](https://github.com/RawTherapee/RawTherapee/pull/7435#pullrequestreview-3059697445), [PR 7378](https://github.com/RawTherapee/RawTherapee/pull/7378#pullrequestreview-2969042638) and code changes [commit c4b0400](https://github.com/RawTherapee/RawTherapee/commit/c4b04007107a426dd7011002e8085aa6f398ab60) |

-### Terminal Emulators
+## Terminal Emulators

 | Name           | Alternative(s) | Evidence | Notes |
 |----------------|----------------|----------|-------|
 | [Ghostty](https://ghostty.org) | [gnome terminal](https://gitlab.gnome.org/GNOME/gnome-terminal), [konsole](https://invent.kde.org/utilities/konsole), [xfce4](https://gitlab.xfce.org/apps/xfce4-terminal), [cosmic](https://github.com/pop-os/cosmic-term), [mate](https://wiki.mate-desktop.org/mate-desktop/applications/mate-terminal/), [deepin](https://github.com/linuxdeepin/deepin-terminal), [alacritty](https://alacritty.org/) (or [the fork with sixel support](https://github.com/ayosec/alacritty)), [wezterm](https://wezterm.org/), [foot](https://codeberg.org/dnkl/foot), ... | [AI_POLICY.md states "AI is Welcome Here"](https://github.com/ghostty-org/ghostty/blob/main/AI_POLICY.md) |

-### Developer Tools
+## Developer Tools

 | Name | Alternative(s) | Evidence |
 |---|---|---|
@ -100,70 +101,63 @@ To Contribute, checkout our [`CONTRIBUTING.md`](./CONTRIBUTING.md).
 | [`ohmyzsh`](https://github.com/ohmyzsh/ohmyzsh) | [Starship] | [Added Claude and Grok as search engines](https://github.com/ohmyzsh/ohmyzsh/pull/13222) |
 | [Taskfile](https://taskfile.dev) | a Make impl | [Uses Copilot for PRs](https://github.com/go-task/task/pull/2592) |

-Note on task runners and `make(1)` implementations: A lot of Make
-implementations exist that are very fit to replace other task
-runners. In fact so many were produced, that one can just look up "GNU
-Make alternative" and find >10 results to pick the one they like the
-best.  Also see:
-[wikipedia/Make](https://en.wikipedia.org/wiki/Make_(software))
+> [!NOTE]
+> #### On task runners and `make(1)` implementations:
+> A lot of Make implementations exist that are very fit to replace other task runners.
+> In fact so many were produced, that one can just look up "GNU Make alternative" and find >10 results to pick the one they like the best. Also see: [wikipedia/Make](https://en.wikipedia.org/wiki/Make_(software))
+> Here are some Make implementation suggestions:
+> * [GNU Make](https://www.gnu.org/software/make/) --- the most complete one, extra extensions, guile scripting, exports, etc.,
+> * [NetBSD make](https://man.netbsd.org/make.1) --- Make used to build NetBSD ports tree
+> * [Jam](https://swarm.workshop.perforce.com/projects/perforce_software-jam/) --- OSS rewrite by Perforce.

-Here are some Make implementation suggestions:
-
-* [GNU Make](https://www.gnu.org/software/make/) --- the most complete
-  one, extra extensions, guile scripting, exports, etc.,
-* [NetBSD make](https://man.netbsd.org/make.1) --- Make used to build
-  NetBSD ports tree,
-* [Jam](https://swarm.workshop.perforce.com/projects/perforce_software-jam/)
-  --- OSS rewrite by Perforce.
-
-### Programming Languages
+## Programming Languages

 | Name | Alternative(s) | Evidence | Notes |
 |---|---|---|---|
 | [`.NET`](https://dotnet.microsoft.com/) | See below | [`.NET Runtime` PRs](https://github.com/dotnet/runtime/pulls?q=author%3A%40copilot+is%3Amerged), [`.NET SDK` PRs](https://github.com/dotnet/sdk/pulls?q=author%3A%40copilot+is%3Amerged) |
 | [Julia](https://julialang.org/) | Python (w/ appropriate scientific libraries) | [`AGENTS.md` in main repository](https://github.com/JuliaLang/julia/pull/58561), [PRs "written by Claude"](https://github.com/JuliaLang/julia/pulls?q=is%3Apr+written+by+Claude) | |

-#### Note on alternative languages
+> [!Note]
+> #### On alternative languages:
+> Suggestions for alternative programming languages are necessarily more complex than many other categories considered here, as that's one of the core technical choices to be made when starting a new software development project.
+>
+> Depending on your needs and technical concerns, you may find any number of different alternative languages useful. For example, when considering alternatives to .NET, Java or Scala may be interesting candidates from the perspective of being similar VM-based frameworks, while Python or Rust may be interesting alternatives in other ways.

-Suggestions for alternative programming languages are necessarily more complex than many other categories considered here, as that's one of the core technical choices to be made when starting a new software development project.
-
-Depending on your needs and technical concerns, you may find any number of different alternative languages useful. For example, when considering alternatives to .NET, Java or Scala may be interesting candidates from the perspective of being similar VM-based frameworks, while Python or Rust may be interesting alternatives in other ways.
-
-### Editors
+## Editors

 | Name | Alternative(s) | Evidence | Notes |
 |---|---|---|---|
 | [Zed](https://zed.dev) | [Lapce](https://lap.dev/lapce/), other popular editors like neovim, emacs, etc | They prominently advertise genAI features as a core part of their product. See their website. | There's a killswitch to disable genAI features entirely, but it's likely the code itself is still heavily LLM-authored. |
 | [VS Code](https://code.visualstudio.com/) | [VS Codium](https://vscodium.com/)* removes the AI _features_ from VS Code | [It's literally their main advertising tagline](./img/vscode.png), and they publicly use LLMs in [their public repository](https://github.com/microsoft/vscode/pulls). Most AI "features" are enabled by default, and some cannot be disabled. | *VS Codium is still written with LLMs since Microsoft owns it |

-### Accessibility Tools
+## Accessibility Tools

 | Name | Alternative(s) | Evidence | Notes |
 |---|---|---|---|
 | [espeak-ng](https://github.com/espeak-ng/espeak-ng) | [flite](http://cmuflite.org/) | [Dev uses copilot for review](https://github.com/espeak-ng/espeak-ng/pull/2328#pullrequestreview-3559773058) and [is setting up copilot instructions](https://github.com/espeak-ng/espeak-ng/pull/2302) | espeak still exists, but is heavily outdated and very bad from a modern standpoint, so it cannot be considered as an alternative. `flite` users may also wish to install `speech-dispatcher-flite`. |

-### Microcontroller Tools and Libraries
+## Microcontroller Tools and Libraries

 | Name | Alternative(s) | Evidence | Notes |
 |---|---|---|---|
 | [FastLED](https://fastled.io/) | | [`.claude` and `.cursor` folders in main repository](https://github.com/FastLED/FastLED/commit/d0d3627eded2e83f52a16763950de94e70c35c4e) |

-### Service Monitoring
+## Service Monitoring

 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [Uptime Kuma](https://github.com/louislam/uptime-kuma) | [Gatus](https://github.com/TwiN/gatus) | [Dev uses copilot for review](https://github.com/louislam/uptime-kuma/pull/6645) |


-### Libraries
+## Libraries

-#### C
+### C

 | Name | Alternative(s) | Evidence | Notes |
 |---|---|---|---|
 | [harfbuzz](https://github.com/harfbuzz/harfbuzz) | Not realistically replaceable currently, use earlier version. | [Core developer enthusiastically discloses LLM usage](https://mastodon.social/@behdad@typo.social/116172838611778656) | |

-#### Rust
+### Rust

 | Name | Alternative(s) | Evidence | Notes |
 |---|---|---|---|
@ -173,19 +167,19 @@ Depending on your needs and technical concerns, you may find any number of diffe
 Also, there is an advistory database of Rust slopware crates, which you can use in tools like
 [cargo-deny](https://embarkstudios.github.io/cargo-deny): <https://codeberg.org/erin/rust-slopdb>.

-#### CSS
+### CSS

 | Name | Alternative(s) | Evidence | Notes |
 |---|---|---|---|
 | [`tailwindcss`](https://github.com/tailwindlabs/tailwindcss) | [`twind`](https://github.com/tw-in-js/twind) | [Sponsorship page states explicitly that the founder uses AI to write code and even sells access to his "Cursor/Claude/AGENTS.md rules"](https://tailwindcss.com/sponsor) | |

-### Game Engines
+## Game Engines

 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [UPBGE 0.5](https://upbge.org) | UPBGE 0.36.1 seems to be slop-free, [Godot](https://github.com/godotengine/godot) | [0.5 release notes state the use of AI in plain language](https://github.com/UPBGE/upbge/wiki/Release-notes-version-0.50#b-implementation-technique-and-limitations) |

-### Services and Utilities
+## Services and Utilities

 | Name | Alternative(s) | Evidence |
 |---|---|---|
@ -195,7 +189,7 @@ Also, there is an advistory database of Rust slopware crates, which you can use
 | [WordPress](https://wordpress.org) | [WriteFreely] | Include [AGENTS.md](https://github.com/WordPress/gutenberg/blob/trunk/AGENTS.md); has [Copilot PRs](https://github.com/WordPress/gutenberg/pull/74449) |
 | [Bludit CMS](https://www.bludit.com/) | [Jekyll](https://jekyllrb.com/) maybe? No signs of AI in the repo but also [no clear statement](https://talk.jekyllrb.com/t/ai-usage-in-the-jekyll-project/10269) provided | [Coding with Claude and reviewing by Code Rabbit](https://github.com/bludit/bludit/pull/1642) |

-#### File Storage
+### File Storage

 | Name | Alternative(s) | Evidence |
 |---|---|---|
@ -203,14 +197,14 @@ Also, there is an advistory database of Rust slopware crates, which you can use
 | [Nextcloud](https://nextcloud.com/) | [seafile](https://github.com/haiwen/seafile) for file storage and syncing only (not a complete worksuite replacement) | [✨ Nextcloud Assistant](https://nextcloud.com/assistant/) (can be disabled)<br />Nextcloud Desktop has [AGENTS.md](https://github.com/nextcloud/desktop/blob/master/AGENTS.md) |
 | [SeaweedFS](https://seaweedfs.com/) | [Garage] for S3 api + [JuiceFS](https://juicefs.com/en/) for the NFS mounts and K8s CSI driver<br />[Rook/Ceph](https://rook.io/) | Using [Gemini and coderabbitai in PRs](https://github.com/seaweedfs/seaweedfs/pull/7996). |

-#### Password Management
+### Password Management

 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [Bitwarden](https://bitwarden.com/) | [vaultwarden] | Include [CLAUDE.md](https://github.com/bitwarden/server/blob/main/.claude/CLAUDE.md) |
 | [KeepassXC](https://keepassxc.org/) | Use official [KeePass 2](https://keepass.info/download.html). It is a .NET application, but [Mono](https://keepass.info/help/v2/setup.html#mono) or [Wine](https://keepass.info/help/v2/setup.html#wine) can be used for Linux, MacOS, BSD, ...<br />[KeePassXC 2.7.9](https://github.com/keepassxreboot/keepassxc/releases/tag/2.7.9) was released before the statement, and was awarded 3 year security Visa by the French National Cybersecurity Agency ([ANSSI](https://cyber.gouv.fr/)) for a First-level Security Certification (CSPN), valid in France and Germany, under report No. ANSSI-CSPN-2025/16 ([archive.org](https://web.archive.org/web/20251128131437/https://cyber.gouv.fr/produits-certifies/keepassxc-version-279), [certificate](https://messervices.cyber.gouv.fr/visas/ANSSI-CSPN-2025-16-certificat.pdf)). | Explicitly stated in [official blog post](https://keepassxc.org/blog/2025-11-09-about-keepassxcs-code-quality-control/).<br />Use Copilot to generate PRs: [Example 1](https://github.com/keepassxreboot/keepassxc/pull/12588), [Example 2](https://github.com/keepassxreboot/keepassxc/pull/12314), [Example 3](https://github.com/keepassxreboot/keepassxc/pull/12199). |

-#### Social Media
+### Social Media

 This is for both social media websites and apps.

@ -219,55 +213,70 @@ This is for both social media websites and apps.
 | [Bluesky](https://bsky.app) | [Mastodon](https://joinmastodon.org/), [GoToSocial](https://codeberg.org/superseriousbusiness/gotosocial) | [CTO discusses using Claude in development](https://bsky.app/profile/pfrazee.com/post/3luyb3jcbv52d) |
 | [IceCubesApp for iOS](https://github.com/Dimillian/IceCubesApp) | [Feditext](https://github.com/feditext/feditext), an iOS fediverse app in beta | Project uses [Claude](https://github.com/Dimillian/IceCubesApp/blob/main/CLAUDE.md) |

-#### Messaging
+### Messaging
 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [Telegram](https://telegram.org) | | [`.cursor` folder in repository](https://github.com/telegramdesktop/tdesktop/commit/983bd1a57bfd9a88bb0e17b51103c5e6cf1e3f24) |

-#### Budgeting
+### Budgeting
 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [Actual](https://actualbudget.org/) | | Include [AGENTS.md](https://github.com/actualbudget/actual/blob/master/AGENTS.md); [Used Open Collective funds for Cursor subscription](https://opencollective.com/actual/expenses/277324) |
 | [Firefly III](https://firefly-iii.org) | | Include [agents.md](https://github.com/firefly-iii/firefly-iii/blob/main/agents.md) |

-#### VPN Software
+### VPN Software
 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [Headscale](https://github.com/juanfont/headscale) | netbird, nebula | [AGENTS.md](https://github.com/juanfont/headscale/blob/main/AGENTS.md) and [.claude/agents](https://github.com/juanfont/headscale/tree/main/.claude/agents) added to repo, commits/PRs include "assisted by claude" notes ([example](https://github.com/juanfont/headscale/pull/3050), there are plenty more) |

-### System Services and Daemons
+## System Services and Daemons

 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [framework-system](https://github.com/FrameworkComputer/framework-system) | BIOS settings, UI widgets, /proc | [CLAUDE file](https://github.com/FrameworkComputer/framework-system/blob/main/CLAUDE.md), [Claude usage by maintainer](https://github.com/FrameworkComputer/framework-system/pull/250) |
 | [rsyslog](https://www.rsyslog.com/) | [syslog-ng](https://www.syslog-ng.com/products/open-source-log-management/) | Explicitly stated in the [documentation](https://www.rsyslog.com/doc/about/ai_first.html) |

-### Operating Systems
+## Operating Systems

 | Name | Alternative(s) | Evidence |
 |---|---|---|
 | [Linux Kernel](https://kernel.org/) | BSD? Honestly this one's tough | [Maintainers are explicitly trying out the technology and considering LLM-based reviews](https://lwn.net/Articles/1041694/) |

-## Why not LLMs?
+# Why not LLMs?

 Could use some help writing this with concrete receipts on environmental, social, political, and economic/labor harms.

-### Legal Ramifications
+## Legal Ramifications

-1. LLMs are often trained on, and thus prone to, regurgitate either completely, or in-part, chunks of code that are licensed under terms which have specific legal requirements that a sloperator may not understand or even be aware of when making a contribution. Regardless of this ignorance, it falls to the repo's owner to comply with the terms of any and all licensed code integrated into their project.
+LLMs are often trained on, and thus prone to, regurgitate either completely, or in-part, chunks of code that are licensed under terms which have specific legal requirements that a sloperator may not understand or even be aware of when making a contribution. Regardless of this ignorance, it falls to the repo's owner to comply with the terms of any and all licensed code integrated into their project.
+
+## Stolen Training Data
+
+AI companies use data from across the web for training their models, most often without the website owners' and users' consent. Big tech companies like Google and Meta are scraping data from the users of major FOSS projects, such as Mastodon, WordPress, and other AcitivityPub-powered and self-hosted software.
+
+* In 2023, [the Washington Post published a list of sources in Google's C4 data set](https://archive.ph/eehKq). A multitude of fediverse instances and personal sites were included. The fediverse is known for its userbase being major proponents of privacy and opt-in consent, making this especially jarring for those who have chosen to use decentralized social media for control over their data.
+* In 2025, [a similar leak of Meta's sources was published](https://archive.ph/NZlf3). Meta's list demonstrates how their integration of ActivityPub into their Threads software has enhanced their ability to mine content without authorization. Threads is widely blocked in some parts of the fediverse, but their scraping of server CDNs has allowed them to get around that. Notably, both the CDN domains of the managed hosting services masto.host and fedi.monster are included in the list; large servers like mastodon.art, which is hosted by the former and has many artists who've left sites like DeviantArt and others due to their AI scraping of user content, had [media unknowingly scraped](https://mastodon.art/@Curator/115022115346692178).
+
+FOSS projects listed in this repo are using tooling that blatantly disregards licensing and violates even the most basic of Code of Conducts, making said tools antithetical to FOSS' purpose.
+
+See also:
+
+- [copilot litigations](https://githubcopilotlitigation.com/), [IEEE article explaining how we go here](https://spectrum.ieee.org/ai-code-generation-ownership)
+- [broader lawsuits against AI companies tracker ](https://chatgptiseatingtheworld.com/2025/11/02/tracker-of-tort-lawsuits-v-ai-companies/)


-See also: [lawsuits against AI companies](https://chatgptiseatingtheworld.com/2025/11/02/tracker-of-tort-lawsuits-v-ai-companies/)
-
-### Environmental Impact
+## Environmental Impact

 To start learning a bit more, you can checkout the wikipedia page on [Environmental impact of artificial intelligence](https://en.wikipedia.org/wiki/Environmental_impact_of_artificial_intelligence#Individual_level). We're very open to people contributing other explanations, links, and resources to learn more about this.

-### Poor Code Quality
+## Poor Code Quality

-Vibe coding results in poorer code quality and is compounded by having addition LLMs do the reviews of both bugs and pull requests in repos.
+Vibe coding / agentic workflows result in poorer code quality, and relaxed oversight practices. These effects may be compounded by the common practice of using additional LLM-based tooling provide code-reviews.

-#### Healthy and Safety
+- [How I Dropped Our Production Database and Now Pay 10% More for AWS](http://archive.today/2026.03.06-144058/https://alexeyondata.substack.com/p/how-i-dropped-our-production-database)
+- [Meta Security Researcher's AI Agent Accidentally Deleted Her Emails](http://archive.today/2026.02.26-153034/https://www.pcmag.com/news/meta-security-researchers-openclaw-ai-agent-accidentally-deleted-her-emails)
+
+## Healthy and Safety

 There's been a number of high profile incidents that have resulted in endangerment or death. Here's some examples:

@ -281,7 +290,7 @@ There's been a number of high profile incidents that have resulted in endangerme

  </details>

-#### Maintainer Fatigue
+## Maintainer Fatigue

 Having to deal with the onslaught of many LLM written pull requests and issues, causes real maintainer burnout that stagnates projects as maintainers become overwhelmed with half baked, poorly written, insecure code. Here's some examples: