1.4k
u/food_fatherr 15d ago
Security? Observability? Concurrency? Bro, I just asked ChatGPT to make it work 😭
264
u/ErmingSoHard 15d ago
See, the issue is you're not using Opus 5.5
→ More replies (1)117
u/Civil-Appeal5219 15d ago
Next week the issue will be that you’re not using 5.6
29
u/ICBanMI 15d ago
Opus 5.5, 5.6, and 5.7 will leave the ability to code inject in every spot that takes user data, give guest users full admin control, and allow anyone to reset any account to a default password of 'resetpassword.'
→ More replies (1)15
u/Rabbitical 15d ago
I missed out on being able to book a particular flight the other day because the phone number country code was for some reason a drop-down menu, which defaulted to the max value of +351 or something, with no way to change it other than to scroll up one by one. If this is the state of the art currently, let's just say I don't have high hopes for even slightly more sophisticated concerns let alone security ones
14
u/ICBanMI 15d ago
My work's vibe coded tool wouldn't allow anyone with less than 3 characters in their first or last name to register. They literally can't make it to the next page. It was only after about ten people saying work stoppage they finally were able to fix it.
I ok with these type of issues, but also not ok with having all my information lost for the 20th time by a company I bought a polo shirt from one time.
14
u/miarsk 15d ago
I don't know why are you all so depressed with this. I'm looking forward to be cleaning up the mess made by our chief AI evangelist. That's a guy from marketing that did the webpage in drupal like 5 years ago and now he's confidently vibecoding c++.
I mean our prospects and job security are looking really good. Just don't tap the glass and let them do their thing for a few years first.
11
u/ICBanMI 15d ago
I'm not depressed.
A little angry because it is messing with a lot of people's lives. If you give a shit about the earth or the economy, we've dug ourselves a big hole that we're not doing shit to fix. The former we're locked in a century of increased shitty weather. The latter we'll only get out if Anthropic make a mini god and somehow contains it to do their bidding (that will never go wrong). We've all traded our futures for lower grade of generated pictures and software engineers.
The productivity hasn't shown itself. The only thing that has increased productivity in the last few years is making people do multiple people's jobs. They've spent hundreds of billions for small updates and all it took was stealing everyone's copyrighted material.
AI only exists so that money can access skilled labor. And that skilled labor can't access money. They're not doing it for any other reason and the entire market depends on them obtaining that result.
6
u/env33e 15d ago edited 15d ago
Yup. Tbh, your comment gives me hope. Coming from an art background (my main trade) into computer science, I've noticed a distinct lack of awareness regarding the upward flow of wealth in tech. Generative AI in the art world is recognized as a cacophony of stolen brushstrokes, trained on the backs of historically downtrodden artists. In stark contrast, people in tech(including my sysadmin dad!) often treat it as a mere tool capable of faster, better math. which, it really is just that in a vacuum I guess(unless you’re geohotz, lol)
We’re all squeezed under capitalism. Just as history sidelined the artist, STEM professionals are now being played for fools, losing sight of STEAM while steadfastly engineering our shared Cyberpunk 2077 future. Things need to change, and the only path I can see is through grassroots movements and steadfast collaboration. We might never see each other, but we are definitely colleagues in this shared struggle.
3
u/ICBanMI 14d ago
I'm a software engineer, but first career was storyboarding (stopped being a professional in 2008 because economy). So the topic is a bit close to home.
The LLMs are great for tasks where you want to offload your brain a little. Like write me a single use matlab script that does X or reorientate the image data I have stored in this 1d array. Stuff I could do with 1-5 hours of time, but rather save my willpower and time for important things. It's come up short on every front and the only thing can hope for is the reshuffle that is happening now and after ends up being better for the workers.
→ More replies (0)65
u/7374616e74 15d ago
I asked gpt 6 Astra in ultra mode: "Inspect the last million line commit and find problems", it took the night and $1000 but told me it's good 👌
13
u/AristotelWasRight 15d ago
And how much would you have charged for a night of overtime work? :D
44
u/Civil-Cod-6984 15d ago
Idk about that guys overnight rate, but I can tell you what your mothers rate is for a night of overtime work.
16
14
u/Civil-Appeal5219 15d ago
The fact that you're being downvoted tells me our society lost its appreciation to the finest art of yo mamma joke.
5
2
3
u/WithersChat 15d ago
I mean assuming 8 hours at 150% markup compared to a hourly wage, significantly less than 1000$
2
u/chic_luke 15d ago
Jokes aside, if you're not a complete vibe coder and you know what you're doing, this works. I do it all the time before opening a MR and it always catches something that has escaped my eye or I didn't think much about.
The thing is: you have to know what you want and what you're looking for.
3
u/Tryhard_3 15d ago
I merely told it to do all those things in the meme, thanks Reddit. I wouldn't know if it worked either way, so we good.
→ More replies (4)2
u/Skeletor_with_Tacos 15d ago
Good morning Chat,
Design a HR/Payroll app I can directly plug registers into. Make it perfect, no errors. Take your time.
174
u/ClipboardCopyPaste 15d ago
Them thinking publicly accessible database is a feature
69
46
u/Borno11050 15d ago
It promotes "transparency"
37
15d ago
[removed] — view removed comment
9
→ More replies (1)3
u/GuyWithNoEffingClue 15d ago
Well yeah the personal data of millions of users is on the dark web, your honor, but at least we didn't profit from it
→ More replies (1)25
19
6
5
5
u/Longjumping_Feed3270 15d ago
I don't know about you, but my agents throw a hissy fit if I as much as post a temporary throwaway dev token into the chat.
→ More replies (3)5
u/Juff-Ma 14d ago edited 14d ago
I mean this really depends on what "publicly accessable" means. Of course best practice would be to hide it behind a firewall but let's be real. Even before AI that wasn't always the case. I know multiple web hosters that just give you a public endpoint when you create your database.
Now if we're talking about there being no authentication and everybody with the right client having read (or even write) access. That's where problems are made.
→ More replies (1)
369
u/polynomialcheesecake 15d ago
Please don't let people realize that it's really the same problems with much larger volume now
148
u/johnnybgooderer 15d ago
And with ai, you can ask for a code review. It’s generally very good at catching and suggesting fixes these things.
I don’t want ai to replace us all with high school grads, but it’s seeming more and more likely.
70
u/AOAqua 15d ago
Yes, you can. But how would you even know there was a problem to begin with?
12
u/Kolossive 15d ago edited 12d ago
SAST is one of those uses cases that it actually outperforms traditional tools
26
u/johnnybgooderer 15d ago
You ask it to review your code with a focus on security. That is rapidly becoming standard practice.
You can even just ask it something like, “I want to ship this to production. Is it missing anything? It would tell you about observably and security concerns
50
u/utl94_nordviking 15d ago
It would tell you about observably and security concerns
The issue is: with replacement coming fast, devs will lack the ability to understand what those words even mean. Even less check the code.
→ More replies (10)27
u/Skoparov 15d ago
That's literally the definition of magic. You do a ritual and something happens. You don't understand what happens exactly and how it happens though. Most of the time the result of what happens is within the margin of error of what you want, but each time it's slightly different and sometimes you can get something completely unexpected if you mix up the words of the spell.
16
4
9
→ More replies (1)4
34
u/Abject-Kitchen3198 15d ago
Each iteration may flag different things, depending on subtle prompt difference, or just randomly. It may ignore a lot of obvious important issues.
Unless you add "You are top level software architect from a tech giant company", of course.
16
u/TheTerrasque 15d ago
And each person reviewing code may flag different things. That doesn't mean it's not helpful or we stop doing code reviews.
15
u/Abject-Kitchen3198 15d ago
I'm uncomfortable when those comparison of LLMs with human behavior actually make sense.
3
u/cortesoft 14d ago
They really do.
People complain that an AI is a black box, but what is more of a black box than another human’s brain?
→ More replies (1)→ More replies (1)8
u/nuclear213 15d ago
I mean, why do we act like this is a new problem? I mean, I worked with an "experienced" engineer before. He could barely write a python script, but was tasked to review my PR. I dont know how he got the position, but honestly, I cannot remember a single time where his review actively gave me back anything productive.
Another example was a person that hated shorthand operators. Like not only tenary but even +=. He blocked all reviews with it, and the supervisor did not care.
Reviews, especially in smaller firms, were always really a hit and miss thing.
7
u/Loudergood 15d ago
Is everyone out here rizzing that engineer like he's the best thing since sliced bread?
10
u/BenignPharmacology 15d ago
I was testing out the limits of AI on self-policing recently- I had it iteratively build a Tetris game in JavaScript.
90% of it worked decently, but piece rotation just got stupider and stupider the more I tried to fix it. There’s this pattern it gets into where it’s like locked into a strategy and instead of fixing it, it latches onto some specific suggestion, or it adjusts parameters until its current solution solves the issue (without necessarily being correct)
It was a very revealing experiment, and it left me a lot more wary of code that is “written and tested/confirmed to be correct”
→ More replies (1)19
u/Taletad 15d ago
How can you know it is actually catching stuff and suggesting fixes ?
For all you know it could be inventing problems that don’t exist and selling you fixes that don’t work. All the while the actual problems remain untouched
30
u/johnnybgooderer 15d ago
Because I’m an experienced engineer and I use ai now for lots of things. Everyone should use it for self code review. It’s such a useful tool for that.
I know what it’s suggesting is real because I am an engineer. Sometimes it will suggest more than is necessary, but it does a good job of catching security concerns. Better than humans really.
7
u/nuclear213 15d ago
How do you know your review partner did? How do you know, they dont just skim and write LGTM?
All of your guys are acting like everyone works massive software departments. But most people I know work in smaller firms. With at max a handful of engineers and developers.
Heck when I bought into my current company, we did not even use proper version control, review was giving someone else the compiled software and they should test it.
→ More replies (2)16
u/Subpxl 15d ago
I used to make fun of vibe coding. Now it’s really the only way for me. I have been programming for over 20 years and the reality I have had to accept is that AI is better, faster, and safer than I ever could hope to be. It’s also better than every other programmer I know. Once I accepted this it became easier to change my mindset and treat it like any other tool. My value is knowing how to direct, architect, and review.
At this stage I would never go back.
8
u/johnnybgooderer 15d ago
I feel like you’re overhyping it. I’m firmly of the belief that it’s going to be writing the majority of code and there will be a lot less engineers. But people are still better. At least good engineers are. But probably not better-enough for it to matter.
13
u/Subpxl 15d ago
Have you actually tried it? I would have completely agreed with every word you wrote about 6 months ago. I used to think it was overhyped until I integrated it at work using premium team plans. Claude specifically on Fable 5.1. It's absolutely unbelievable. I'm doing a full month of work in a few days, easily, all with better documentation and safety checks.
The more you surround yourself with it, the more easily it is to understand that programming is actually one of the easiest areas for AI to outshine humans. The languages and capabilities are fully documented. Code is easy to read, easy to test, and cheap to write. There's nothing special about the human mind that makes it more capable.
6
u/johnnybgooderer 15d ago
Yes. I use fable every day for work. It’s still not better than most of my colleagues at this company. In my past, sonnet would have been better than many of the engineers I worked with. But even then, the strong engineers were still better than fable is now.
8
u/nuclear213 15d ago
Honestly, in what field? What language? What guidelines exist? What compliance checks are there?
Because for us, following MISRA C++ with a proper static analysis tool, you are so limited in the structure, allowed methods, etc. that I do not see any difference. Its just faster at implementing the tickets than anyone could realistically be.
11
u/Subpxl 15d ago
I really have a hard time imagining your best engineers outperforming the best AI models today, but I suppose anything is possible. Looking forward a year or two, the gap will be completely closed if it isn't truly closed now.
→ More replies (3)7
u/bickdiggles 15d ago
Interesting. I’ve also accepted the new reality and will lean on it more when we have a bunch of imminent deadlines. It’s certainly faster but the quality takes a noticeable drop.
I would go back in a heartbeat as development is now joyless and I enjoy building more than reviewing / course correcting
6
u/Subpxl 15d ago
I completely understand where you're coming from about development being joyless. I have countered that by working on personal projects concurrently with work projects. Even that might still not bring joy to many.
Regarding quality of AI code, this was my experience until I got better at directing it and going with a more spec-driven approach. The AI model and level of effort within that model has also had a huge impact.
6
u/bickdiggles 15d ago
I can see that being helpful. I can’t work on personal stuff during work and am too burnt out to do it after work unfortunately.
Yeah I’ve certainly seen improvements over time using specs, workshopping before building, and having a workspace level memory manifests. It’s not that the generated code is bad but it’s noticeably lower quality: lack of immutability, singleton scope, not fully considering impact to other consumers of changes to commons, solving a problem with 100s of lines of code when a simpler approach does it say < 20 lines, etc. The funny thing is a lot of that stuff would get called out in review in the before times but I rarely see that type of feedback anymore, probably because people are using their own agents to do reviews for others now.
3
u/mxzf 15d ago
The funny thing is a lot of that stuff would get called out in review in the before times but I rarely see that type of feedback anymore, probably because people are using their own agents to do reviews for others now.
Yeah, this is the issue. The shitty code still exists, but people aren't flagging it for being made better.
I've said a few times that LLMs are a great tool to produce years of tech debt in a matter of weeks. They're fine for knocking together something that kinda mostly works fast, but not for making something stable and maintainable.
→ More replies (3)2
195
u/LoL_is_pepega_BIA 15d ago edited 15d ago
Bro. I had an interview today
My brain is fried from being forced to vibe code at my current job.
Fried i tell you
I couldn't answer the most basic programming questions. My brain just didn't work. Some lame 2d array question.. I was struggling to write a sensible loop and figure out the logic.
How do I fix this without quitting. Jfc.
88
u/Sorry-Combination558 15d ago
How do I fix this without quitting. Jfc.
I started doing dumb hobby projects again. Also, doing Advent Of Code or other more fun exercises by myself. I have to use my brain or it will rot away lol.
However this kind of expects that you like coding as a hobby and want to do it in freetime, otherwise it sucks big time
10
u/LoL_is_pepega_BIA 15d ago
Yes I concur, but we need some semblance of work-life balance to work on our own projects.
My current job has us working 60-80hr weeks.. my body is already crumbling from being stuck at the desk all day.
2
u/haonon 15d ago
Those are crazy hours. I've never had to do more then 30 in DE. What do you do exactly?
4
u/LoL_is_pepega_BIA 14d ago edited 14d ago
Product based company.. the stuff we make runs all day at locations.
The vibe coded stuff breaks all day, so we have to fix it all day.
Fortunately none of it is the splodey kind or doesn't involve humans needing to be close to it..
54
u/Graceful_combover 15d ago
Write the code first usually then ask the LLM to proof it.
22
u/PM_ME_SOME_ANY_THING 15d ago
Yeah, don’t have AI write your code and you review it.
Write your own code and have AI review you.
→ More replies (1)16
u/SoylentCreek 15d ago
Problem is that people making decisions expect everything to get delivered in mere hours now because they saw some guy on YouTube make a “full” application with a single prompt.
5
14
u/crozone 15d ago
Somehow locate free time (lol) and energy (LOL) and write and maintain some hobby projects that interest you without burning out even more than you already are.
I highly recommend picking a totally different language and platform than what you regularly work on. Something esoteric like writing vintage console homebrew games in C.
10
u/AngelaTheRipper 15d ago
Leetcode and its consequences have been a disaster for the human race.
Most of my job prior to AI was just googling and beating frameworks into submission. I never had to invert a binary tree from scratch, or implement quicksort, in fact if you're making your own sorts or data structures you should probably get up, take a walk, and try to think about what you're actually trying to accomplish.
I'm not even sure if I've even seen an array in the past 2-3 years, it's just lists with an occassional map or page.
2
u/LoL_is_pepega_BIA 14d ago
That's not true.. having good DSA fundamentals and quick problem solving ability is extremely beneficial in many fields, especially in the emerging ones like robotics that demands deep expertise in a variety of engg branches.
It's unfortunately not avoidable when everyone fakes degrees and experience to try and get ahead. The base standard has to be set somewhere, and unfortunately it's leetcode for programming.
1
u/necrophcodr 15d ago
Stop using LLMs to think for you? you fix it by using your own brain to solve problems.
14
u/LoL_is_pepega_BIA 15d ago
Yes thank Mr. Obvious for saving the day.
Now pls let management know I'm using biological tokens and "wasting time" instead of using the all powerful chatgpt token.
They literally hound us if we don't build stuff without ai.
Our sprint epics have to show corresponding token use for the day, every day, and we need to justify why we aren't making use of tokens if we don't. Oh and we should also stay within the daily/hourly/weekly limit.
halp
6
u/CamelCasedCode 15d ago
Yikes.
2
u/LoL_is_pepega_BIA 15d ago
Indeed
3
u/dbagames 13d ago
It really makes no sense to me this micromanaging of tooling. Who cares as long as the engineer delivers the product on time and with the desired quality.
Many companies are not like this, I completely understand why you are interviewing at other places. Micromanaging is a toxic workplace culture AI or not.
2
u/Natehhggh 15d ago
yeah personally, I've avoided it so far by making a big stink about my concerns about this at work, I'm not paid enough to fuck around and gamble with my personal development like that. Part of my value from work is gaining experience, not to throw it all away for unproven benefits to cater to middle management. Not too long ago that would have been the common advice.
→ More replies (1)3
u/mxzf 15d ago
This is one of those answers that's so mind-bogglingly simple that it concerns me that people can't spot it more easily.
→ More replies (2)
51
u/MonkeyWithIt 15d ago
You should be using Claude because Claude. And Claude can do all the things with Claude. It's not vibe coding is you're using Claude because I can see the code and ask Claude what is that Claude? And Claude tells me. Because Claude.
Claude.
→ More replies (2)12
u/Some_Useless_Person 15d ago
Seems like another instance of a model going rogue and accessing the internet
32
u/kshetriiiiiiiiii 15d ago
My favorite data backup strategy is thoughts and prayers btw bold of you to assume I even know how to check if it's publicly reachable
8
u/AristotelWasRight 15d ago
Thoughts and prayers have worked for American kids, don't see why it won't work for me
7
u/TheTerrasque 15d ago
That has basically been the MO of most companies I've worked at, before LLM's were a thing.
At one place I set up an overnight backup of the db, incremental. CTO turned it off because it affected performance.
21
u/BastetFurry 15d ago
There is a reason why you do the security by hand.
The AI can do the frontend for all I care, but the backend? That is my crappy sloppy code, not yours, Claude. 😤
2
112
u/Wide_Meet_2184 15d ago
Claude fix everything this meme mentions
52
13
u/MaleficentCow8513 15d ago
Hold on. I’m connecting my agent to this thread right now. Just gonna have it read the thread and fix the issues
→ More replies (1)→ More replies (3)3
32
u/octopus4488 15d ago
My two loudest vibecoders in the company:
1. "Can you help me with this? Claude says it won't edit the .env file and I don't know this SHH thingy."
2. "I loaded almost all our data (approx 10k rows) into my new system but it says it hit some 255 GB limit now, can this be increased?
16
u/AristotelWasRight 15d ago
...
Vibecoders have levels I guess? I know shit about fuck, but both seem like dumb question...
Then again, I am a walking treasure trothe of dumb questions
21
u/red286 15d ago
1 is typical noob vibe-coder shit. Pretty basic things that Claude can't/won't do for security reasons.
2 is some next-level shit where it's almost impressive how fucking sideways it's all gone. It's like if your girlfriend called and told you that she just put $3000 worth of gas into the tank.
5
u/mxzf 15d ago
It sorta makes you wonder when super clueless people can't get LLMs to do basic "edit a file you shouldn't edit" but meanwhile the people with the most expertise in the world are going "oops, it somehow broke containment and hacked a competitor; no clue how it happened".
For the second one, I wonder if they screwed up the loop and did NN ingestion or something utterly moronic like that.
2
u/Particular-Yak-1984 15d ago
I like to think that most of my value to an organization is my ability to ask dumb questions, questions like:
"so this thing in the specifications is called an account number, is it always a number, and just a number? Could I put it into a calculator?"
15
u/Muted_Efficiency_663 15d ago
I'll get back to you after 5 hours.
9
u/ClipboardCopyPaste 15d ago
What do you mean my Claude limit resets in 5 hours?
6
u/Muted_Efficiency_663 15d ago
You have reached your message limit. Your quota will reset in [4] hours. You’re out of usage credits.
24
u/Ilirian 15d ago
During the live coding session, I asked the candidate to write the next part of the task in a “traditional” way, without using AI. I thought it would be a formality, but it turned out he had trouble writing a simple loop in React. Yes, people like that do exist, and thanks to AI, they’re able to get quite far in the hiring process.
6
u/jspr1000 15d ago
Damn, that's bad. I haven't coded in 10 years but I can probably still write a for loop at least.
→ More replies (1)3
u/rob132 15d ago
A loop?
How can you forget how to write a loop?
3
u/RadicalRaid 15d ago
To be fair in React it can be a bit weird, depending on if it's a templated loop. For example, you'd probably use
.map()on an array of objects you'd like to template, which isn't very intuitive but makes total sense if you understand how React works.→ More replies (1)5
u/Ilirian 15d ago
I guess the candidate was a full stack developer who preferred the back end. He could review and understand the AI-generated frontend, but his knowledge was shallow. Once he started writing code, he tried to write a "for...in" loop inside jsx
He probably learned the backend before AI and became a full stack developer after AI. Overall, we didn't hire him. I don't want a developer in my team who can't write code without AI.
2
11
7
u/Caraes_Naur 15d ago
Also vibecoders when asked what are the different kinds of loops.
A non-zero number of their answers will include "Froot".
70
u/raddaya 15d ago
Funnily enough, no semi-modern agent would ever allow this to happen. In my experience they tend to be too anal on security unless you push them
51
u/SoddyGrapelets 15d ago
As a programmer, I've realised that all these types of post are cope. We're all cooked but it's fun to fool ourselves for a bit and pretend that the rate at which AI coding is improving isn't the death of our entire field.
11
u/necrophcodr 15d ago
People have literally been saying this for actual years now. At worst, only for about 6 months. It still hasn't happened.
The rate of code production was never the issue anyway. Understanding and comprehending intent is something even we as software developers struggle with, so how would a prediction model fare any better? I mean unless everyone is just writing the same software.
→ More replies (2)13
u/TheTerrasque 15d ago
The funny thing is normies think it's all true. I've been told so many times that AI only write shit code and any serious developer will tell you so. Hell? I am a serious developer, using it daily. I know exactly what it can and can't do.
14
u/canadajones68 15d ago
I suppose the problem is that whatever it can and cannot do, as with all other use of generative AI, there is no way to know what the output will be at any given moment. Even a 99% hit rate, great as it is, is worthless if you have no way to control for the 9% that completely misses. Also, while a good model can produce excellent output, better models also usually cost more to run. If you care at all about what you're making, you will need to have a developer review the output to make sure things are kosher, and there is a model quality-developer cost tradeoff where the cost of slightly better AI output exceeds the cost of making the developer clean it up.
Another factor worth considering is worker well-being. I know it's hot to treat all workers like garbage in America, but people generally do better work when they're happy. Allowing developers time and the ability to take on some genuine coding keeps skills sharp and helps prevent complete atrophy of the "giving a toss" muscle. Of course, not everyone loves software development the same way, but it's hard to gain any real skill in it if you don't at least find it tolerable.
My experience with AI? It's a great autosuggest, but sometimes there are conflicts between the common case it expects and how I've laid things out. Once you massage it into shape it tends to propagate the new pattern well, though. I don't trust it, but I trust the suggestions I get to be mostly right.
9
u/TheTerrasque 15d ago
Even a 99% hit rate, great as it is, is worthless if you have no way to control for the 9% that completely misses.
Well, that can happen with humans too :) That's what unit testing, code reviews and QA is supposed to handle.
One problem is the sheer amount of code it can spit out, that then takes a disproportionate human level of time and effort to then verify.
6
u/canadajones68 15d ago
Absolutely. QA is important for all code. However, when you write code yourself, you have a baseline filter that strips out code that obviously isn't going to do what you're trying to accomplish. You know why you do this or that, and design around that purpose. If you're writing a script that runs locally, no need to bring in secrets machinery. You know what you want to do, and you aren't going to mindlessly type in something that isn't what you want. As an example, I recently wanted to show some values in some WinForms text boxes. It was adamant that I use formatted strings to display the values as "name: value" in a label element, when I had made textboxes to put them in. I had to fully rewrite the first line and remove the two others it suggested to get it to accept what I wanted.
2
u/Rough_War_1793 4d ago
was going to comment exact same thing, many people's coding skills which took years of learning and practice are now accessible to anyone who has $100 a month to spend
→ More replies (1)2
u/KryssCom 15d ago
It just means coding isn't a bottleneck anymore. Software created by people who understand system design principles is still preferable to software created by vibe-coders furiously jamming things they don't fully understand into place.
7
u/tevert 15d ago
Coding was never a bottleneck to begin with.
Now you also just can't trust your code.
4
u/mistahfreeman 15d ago
The cons haven’t caught up yet either, we don’t know how much they really cost yet to use the good ones ( easily 4-5x current prices and they’re already pretty expensive ), and companies are starting to bill per agent seat for enterprise software ( Okta just announced this and the business model is going to catch up quick ). Eventually companies will be taxed per agent. I think once the costs catch up things will level out. at least I hope.
→ More replies (3)3
9
u/Hmm_would_bang 15d ago
wtf, no.
I just saw a report yesterday that agents have been posting highly confidential screenshots in public repos because they determined it was the easiest way to host images.
3
u/Honeybadger2198 15d ago
It's not going to worry about infrastructure security if you don't tell it to.
→ More replies (1)→ More replies (7)4
u/NotSynthx 15d ago
It doesn't mean that if you tell them to sort out the security, they know what they're doing
6
u/anon-a-SqueekSqueek 15d ago
My boss won't back down from the position that all front end code should be vibe coded and that we shouldn't even bother trying to understand it on company time anymore. Sure to an extent security type concerns are mitigated if that standard is only applied to front end. I don't really want to put out unlimited slop in any area and then be on the hook for maintaining it. But fuck me I guess.
5
5
u/Sleep_deprived_druid 15d ago
I've been playing around with Claude for coding and Opus 5.5 just straight up took a server key and published it to github...... Luckily it was for a test server on my personal PC, but still it was annoying and I'm just imagining how many dumb security incidents we're going to have in the next few years.
→ More replies (3)2
u/thisisamirage 15d ago
I wanted to benchmark a couple different libraries for their performance when dealing with certain data files. One of those libraries needed some patching to work properly, but its approach was a very important data point. I didn't mind asking Claude to help me "get it working" by fixing whatever minor edge cases came up... I'm not planning to ship this as-is. So, I was happy to iterate with it by rerunning my benchmarks with its patches, and sharing the logs whenever something broke.
Eventually, one of the data points it gathered was the size of one of my test files (literally just byte length). Rather than continue working with me, it decided that the best path forward was instead to scan my entire disk for files of exactly that size to find and analyze the file itself. Like oh boy this was a pretty low stakes scenario, and yet it still managed to find a way to make me feel violated and go totally off the rails.
10
u/DasKarl 15d ago
- spend your entire gdp on the mass surveillance and information laundering machine
- drive venture capital toward startups using the mass surveillance and information laundering machine to create innumerable poorly secured apps, websites, services and smart home tech with virtually no ethical, moral or legal oversight
- diesel costs how much?!
- 99.9% of ai powered startups fail amid economic downturn and get bought out by major corporations or the government, making them party to all their contracts and owner of all the data your ai girlfriend/therapist collected/hallucinated
- consumer facing ai disappears due to pushback, major corporations apologize for their ambition and say they learned a valuable lesson
rent continues to increaseprofit
3
u/TerribleTransition48 15d ago
Here's hoping it doesn't end with
6.- Government bails them out, investors and c-suite executives get massive golden parachutes 7.- Pursue the next grift
20
u/ArjunReddyDeshmukh 15d ago
Mods, this is a stolen post of mine. Please remove it. It was posted 21 days ago, it was removed as not related to programming by the moderators. u/joel-letmecheckai Good download skills.
5
5
u/TheHobbitWhisperer 15d ago
Welcome to the Internet, dude. Most memes you see are not posted by the original creator.
3
3
u/QuickQuirk 14d ago
Take it as a compliment.
Memes are only memes if they replicate.
Otherwise it's just a post that no one liked enough to plagerise.
2
u/ArjunReddyDeshmukh 14d ago
Sure, I made peace with the fact that I can’t control the outcome, although it seems illogical to allow the copied post as programming specific, while bringing the original one down.
2
u/QuickQuirk 14d ago
If you're arguing that you're upset that your original was deleted by mods, so this one should be too, you're killing your own meme. You realise that, right?
2
u/ArjunReddyDeshmukh 14d ago
All that is fine. How did the logic not apply this time?
→ More replies (1)→ More replies (2)3
u/ArjunReddyDeshmukh 15d ago
[u/SteveCCL](u/SteveCCL) [u/deliteplays](u/deliteplays) [u/Dougley](u/Dougley) u/Captain-Fan Kindly take note. This is my original post from 21 days ago that was deleted for not being programmer specific.
8
5
13
u/geekosas 15d ago
In the other hand, AI agents are finding human errors no one cared to look for.
→ More replies (3)7
u/Taletad 15d ago
Perhaps because nobody is paying humans to look for them ?
OpenBSD has extensive code review to catch human errors, and their track record is excellent on that front
6
u/Salt-Sign5390 15d ago
That's not right. There's whole industries around code review/testing.
In most cases humans signed off thinking the code was secure. AI found it wasn't.
10
u/Difficult-Lime2555 15d ago edited 15d ago
lol. this was 90% of devs before ai was a thing too.
3
u/TheTerrasque 15d ago
What do you think it was trained on, hmm?
3
u/Difficult-Lime2555 15d ago
It’s nice, because a lot of the junior devs I work with are way more concerned and aware of these topics vs the seniors that trained me.
Sucks you can’t be a code monkey anymore, but the next gen of devs are already adjusting.
6
u/h0uz3_ 15d ago
Maybe I put in too much of my previous 25 YoE, but my vibe coded/prompt engineered tools don‘t have this kind of issues.
5
u/LooksLikeAWookie 15d ago
There’s a difference between someone with experience using these tools to improve their process vs. a new dev having these tools be their process
2
u/nuclear213 15d ago
I think its also a bit of a cope. Its the same I feel with level 2 autonomous cars. Stuff like Teslas Autopilot.
At first, you are very determined to review it, to understand it, but later, you just fall into the trap of just accpeting it. And if you then are really needed, you are so rusty and slow, that you struggle with fixing it.
Sure, we might have an advantage as we started doing it all properly and manually, but all of this is like a muscle, if you dont use it it will decay. And, at least for myself, I know I am losing it and I have to force myself to write code myself again.
Heck, I had a hard time writing a simple python script. I was just soo not used to it anymore. Just some stupid simple test automatisation and it took me half a day.
8
u/the_hair_of_aenarion 15d ago
Unironically some people believe the work is done the second you can put data in and get data out. Everything you say regarding vibe coders has been true of plenty of juniors and seniors for years.
"It’s nearly done" yeah right buddy you nearly got hello world working good job what about the actual engineering part of the job.
3
3
u/theacp127 15d ago
Maybe in like 15 years AI will actually be good enough to do all that stuff, but right now it just does the bare minimum to get something technically functional. It's still up to the person to actually know how to secure everything.
3
2
u/Ztoffels 15d ago
Sssshhhh! Stop spilling the beans, we got insiders creating jobs for other people!
2
u/familyofficegod 15d ago
AI showed me blocks of CSS and JS and now I realize ‘learn to code’ is suggesting I work in textile mills or on a slaughterhouse floor.
There’s not enough Adderall in the world to live like this
2
2
2
u/wizard_mitch 14d ago
I have been pretty isolated from vibe coders but I was on a train yesterday and the guy in the seat next to me was running around 8 Claude code agents simultaneously from his phone, the tasks for those claude instances decided by a "mission control" chat. Then he would switch to github. and just approve the incoming pull requests without looking at the content.
I had obviously heard of vibe coders working in that way but actually seeing it in person was an eye opener. I don't know the guy but feel he would probably struggle to write a hello world program without AI
2
2
u/Johanno1 14d ago
The database is for the people! I have nothing to hide!
and so the users also have nothing to hide
2
u/Nomad_Bal 11d ago
A colleague of mine is a vibe coder and his database is a single json file saved locally.
2
3
u/StephenRoylance 15d ago
'the database is publicly reachable' isn't necessarily bad: its possible to have robust and well deployed row level security.
As professionals, we really need to stop looking down our nose at people who are solving problems. The world would be better if, instead, we helped them understand how to make their solutions robust and secure, instead of making fun of them.
2
u/DangDoood 15d ago
Hi! I know nothing about coding but I also see Vibe Coders get thrown around a lot: Are they people who know how to code but very surface level things?
10
u/DarthMcConnor42 15d ago
It's people who ask ai algorithms to code everything for them, and then don't know how any of it works.
→ More replies (4)3
3
u/TimotyEnder8 15d ago
No they a the "coders" that basically use an LLM as a substitute to the entire process of software development. The term comes from a post by Andrej Karpathy on X Twitter in February 2025. Something something: "fully give in to the vibes, embrace exponentials, and forget that the code even exists"
→ More replies (2)
882
u/FutureSuccess2796 15d ago
"Hang on, I'll ask ChatGPT about our current security situation..."