Robert Gützkow

@HonkHase@chaos.social ich bin ein wenig erstaunt dass das nicht nur impliziert sondern sogar direkt so im Referentenentwurf steht. "Bis eine 0-Day-Schwachstelle nach Veröffentlichung bei den Herstellern durch das Bundesamt für Sicherheit in der Informationstechnik in Systemen durch Patches behoben wird, vergeht Zeit, die der Bundesnachrichtendienst für wichtige Arbeiten nutzen kann, welche die Grundlage für die Auftragserfüllung darstellen. Wird das Bundesamt für Sicherheit in der Informationstechnik aufgefordert, unmittelbar, beispielsweise über eine Austauschplattform, Erkenntnisse zu teilen, kann die Zeit zwischen interner Bearbeitung, Meldung an die Hersteller, Behebung des Softwarefehlers, Bereitstellung eines Patches und finaler Installation des selbigen, ausreichend lang sein, um die Schwachstellen in Wert bringen zu können"

@HonkHase@chaos.social das bedeutet nach meinem Verständnis, dass alle Meldungen an das CERT-Bund an den BND weitergereicht und ggf. ausgenutzt werden würden. Im Kontext vom Cyber Resilience Act würden alle Meldungen die über die Single Reporting an die ENISA und das BSI übermittelt werden, ebenso betroffen sein.

@fsiddi @dfelinto I can completely understand if you wish to not answer these publicly for now, but do please consider them in your discussions about how you're moving forward regarding AI and Blender.

@Umbreon Glad I donated to them yesterday!

@fsiddi I'm glad that you have considered the feedback from the community and are taking actions. Following the new announcement and your statements here, I do still have some questions. You state that "Blender does not need to take any action towards those companies, or support their goals in any way" and that you will have to tackle how generative AI will be treated in the context of Blender in general. Prior to the announcement of Anthropic as a corporate patron, Campbell implemented an MCP server addon (https://projects.blender.org/lab/blender_mcp) which was also referenced in Anthropics press release (https://www.anthropic.com/news/claude-for-creative-work) Am I correct to assume then that this was done on the own volition of the team and not as some form of collaboration with Anthropic? Is the continuations of projects related to generative AI like this being reconsidered?

@fsiddi Thank you for taking the time to respond Francesco! I'll keep an eye out for the decisions made and will resume my contribution to the development fund.

@fsiddi @dfelinto Additionally, what locally run open source / open weight LLM did you use for these tests? I'm not aware of any that both align with Blender's values and are capable of delivering results comparable to their commercial counterparts. Seems like models that honor the licenses of their training materials are quite rare.

@fsiddi @dfelinto Furthermore, did you at any point during the development of the MCP server add-on discuss the potential risks of creating an interface for LLM-based automation (made officially by Blender, not a community contribution) that may in the future be used to automate artists' work? Were there any safeguards or limitations built-in as part of the design to protect against such a scenario?

Qwen 3.5 is an open weight model licensed under Apache 2.0. Like other LLM models, Alibaba does not publicly share their training data corpus. It does not honor the licenses and copyrights of its source material.

@dfelinto @fsiddi Hi Dalai, it's been a while! I'm glad that you didn't develop this in collaboration with Anthropic. Sorry if I'm grilling both of you with uncomfortable questions, but could you please explain what the motivation was for exploring this feature?