Just a regular Joe.

  • 1 Post
  • 690 Comments
Joined 3 years ago
cake
Cake day: July 7th, 2023

help-circle












  • But I wouldn’t run my production apps—that actually make money or could cause harm if they break—on unreviewed AI code.

    Here’s the thing though… if you design your system and security boundaries well (which isn’t always easy), you can run non- or poorly reviewed code relatively safely. It’s standard security practice to design for minimal privilege.

    What you don’t ever want to do is give AI agents - nor inexperienced engineers - admin permissions and let them run wild. Both AI and human will do something stupid at some point, leaving you at risk.

    For serious companies, the risks are more likely to be on the developer’s own machine, when they give it admin credentials and unsupervised access. For example, when “Fix this bug” leads to it testing in production, because it has both prod credentials and configuration at its disposal.


    Lesson: Give agents and humans safe playgrounds that limit the blast radius, both during development and in production.


  • JoetoOpen Source@lemmy.mlBenefit of AI?
    link
    fedilink
    arrow-up
    3
    ·
    24 days ago

    Many people have “itches to scratch” and some interest in development but little time to learn, so AI coding tools will allow them to scratch many of those itches without paying $ to others or investing that time (for better or for worse). Even as an experienced (but no longer full time) coder, I use it to scratch itches when I don’t have the time/lust.

    Often enough, you’ll find some customizable app that does 90% of what you want, with a bunch of features you don’t care about. Writing personalized apps is a cool new thing, giving you exactly the functionality that you want. Many times these will be based on OSS or open libraries, which the AI just glues together.

    Will this personalized development result in new quality OSS apps, though? I doubt it. We also don’t really need more sloppy code on github.


    There are a lot of personal apps that just happen to have an OSS license… and then there are OSS projects, built and maintained as OSS community projects. It takes dedication to run a real OSS project, build a community, handle issues, websites, etc.

    Will AI coding tools assist developers of real OSS projects? Sure… many are already using it to varying degrees. We’ll increasingly see it being used to find and fix bugs and security issues ahead of time - security researchers & blackhats are already having a field day.




  • JoetoHacker News@lemmy.bestiver.seSoftware Engineering Is Back
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    27 days ago

    And yet, agentic coding is here, and is not going away.

    There has been and will always be those interested in understanding and learning more, along with those who prefer to invest the bare minimum.

    There will be good software created by people using it, along with plenty of crap, with organizations and individuals paying for both. Similar to today.

    As for a lack of learning/skill development due to AI … it’s a challenge for sure, but such challenges are nothing new.

    In the end, code has been a convenient medium to express software/system design, but it’s not the design itself. People think, learn and understand differently to each other, and it might just be that code takes a back seat to other design mediums going forward.




  • There is plenty of consumer hardware that is supported on Linux, or will be as soon as a kernel developer gets their hands on it, reverse engineers the protocol if necessary, and adds support. For things like keyboards, there are often proprietary extensions (eg. for built-in displays, macros, etc.). It pays to check for Linux support before buying hardware though. Sometimes it’s not the kernel drivers, but supporting software (eg. Steam input) that might not support it.

    First class vendor support for Linux is more common for niche/premium hardware designed in the west, than cheap chinese knockoffs that follow it. Long term customer support is not their strong suit.