TLDR Dev · MISCELLANEOUS
AI SLOP SECURITY ENGINEERING: OKTA'S NEXTJS-0AUTH TROUBLES
Summary from the TLDR Dev newsletter
Joshua Rogers reported a security vulnerability in Okta's auth0/nextjs-auth0 project and submitted a patch. However, the maintainer used AI to rebase the commit, resulting in incorrect attribution and the removal of Rogers' contribution history. The maintainer then used AI to apologize for the error and refused to correct the commit, despite Rogers' request.