Posted by RyeCombinator 13 hours ago
Funny how AI is continuing the same story of non/semi technical busy bodies with their dumb bullshit.
1 https://www.thepragmaticcto.com/p/lines-of-code-are-back-and...
Basically the choices are:
1. Roll your own
2. Lockfile your deps for too long
3. Chase the bleeding edge for every dependency
The first is security-through-obscurity because DIY libs will have bugs and vulns but they won't be well-known. The second means missing known vulnerabilities. The third means supply-chain risk.
The rash of attacks and the ease of LLM-powered roll-your-own has shifted the risk-reward calculus towards 1.
But I hate it. This is the further Peter Pan never-gonna-grow-up of our industry that we cannot develop solid best-practice tools and must churn endlessly.
A few of my workflows now are: Use an LLM to generate code that generates code.
"Second Order AI Software Engineering(TM)"
As dang said in one of these threads recently, opinions are just spilt on this!
I spend a lot of my time taking over codebases other people left behind, and the AI-heavy ones have a recognizable shape: lots of plausible-looking code, thin tests, and nobody who can tell you why a given abstraction exists. Writing was never the hard part. Deciding what not to build, and being able to delete it confidently later, is the part that does not get faster with a model.
What did get faster for me is reading and reverse-engineering unfamiliar code - which is a little ironic, since the same tools are now producing more of the unfamiliar code that needs reverse-engineering in the first place.