Yes, and before that you were probably adept at writing code based on incomplete and sometimes inaccurate documentation, using tools and technologies that were powerful but occasionally buggy.

Or at the very least, you were interested in the subjects in question and just never had the time or other resources to learn them.

Do any of the execs you're working with seem to be overly confident that LLMs can fully replace devs?

If that's the case, that's the primary example that I've seen in many places.

Yes, both daybreak and cvp as an individual. Less than 24 hours for access.

No that's including all the comments, types, dev only checks etc. I'm talking about what you get when using the production build.

I had a quick look around and it's actually ~1000 lines apparently, in React 19.

Wait until you hear about the attack surface you're exposed to when running Linux!

> That's mighty white of you

The fuck kind of racism is this? Calling people white for using basic rhetoric?

> They don't actually prevent people from finding vulnerabilities; it just slows people in finding them because they have to use less capable models,

That's the point. Slowing people down. Hackers aren't "not people".

> You can't ever get rid of the arms race between defender and attacker.

Yes you can, and by doing exactly what you're complaining about:

   And if you do want that access, you have to verify your identity, and do a bunch of other things

50-50.

Yes, agreed the US agencies will have the best. But not from Anthropic: recall the White House unlawfully blacklisted Anthropic when Anthropic dared say no to their models getting used in certain ways, and that Anthropic was given an order to stop supplying to any non-American despite the large number of non-Americans on their staff.

So for this:

> Instead of building a tool to fix security issues, they've essentially built a cyber weapon for offensive use.

They did both. That it's a machine gun with an overly-cautious safety system isn't great, but it's also a tool and as a tool is better than either a machine gun with no safety system or just giving no-questions-asked direct control to just the US government.

No-questions-asked access would be from the other AI vendors.

compliance is payed for by the parties ensuring the compliance. so yes if the cybersecurity was not strong enough, some big companies would go bankcrupt or change their TOS.

And then others would emerge, and the cat mouse game of hackers and viruses in the 2000s would pick up again. We had a bit of a calm period when Anti virus programs in windows didnt do much anymore

> No, it means some billionaires catch strays and have to sell one of their yachts out of their fleet, or cut dividends.

Their capital isn't your body armour.

Anything it costs them has all the impact of an ambulance at the bottom of a cliff, when we could have a fence at the top.

> The collapse of the current Google/Microsoft security and management duopoly would be less impactful on the average computer user than the death of flash player.

Add Cisco (CVE-2026-20213), NGINX (CVE-2026-27654), the Linux kernel (CVE-2026-31554), ImageMagick (CVE-2026-33901), FreeRDP (CVE-2026-40033), OpenSSL (CVE-2026-45447), Suricata (CVE-2026-45751), FreeBSD (CVE-2026-4747), PostgreSQL (CVE-2026-6479), and Mozilla Firefox/Thunderbird NSS library (CVE-2026-6772).

> None of this is for you; it's for money. It's someone else's empire. Cybersecurity is a farce, and western culture would quickly recover from a complete collapse, and be better off for it.

Cybersecurity is indeed a farce; one does not put out a dumpster fire by pouring on gasoline. Well, not unless it's a huge amount, and then you've got gasoline everywhere off-gassing and one spark from being much worse.

Due to tech being over-sold as a solution to everything, it has been so heavily integrated in our infrastructure that "a complete collapse" would be devastating.

We see small, limited, isolated incidents already, just from Ukraine blowing up Yandex servers and by extension knocking out random chunks of Russian economy, or unknown hackers switching French/Dutch/US fridges to defrost overnight spoiling the food, or messing with water control systems in (fortunately small) reservoirs, Revolut not working for a bit when one European DC went down, and some stupidity where a root signing certificate had a private key of "4" for 18 months without anyone noticing.

Do this everywhere all at once, and it's likely we get mass blackouts, banking in general stops, software updates and signing can't be trusted to undo the mess. It's anywhere from "really bad" to "civilisational crisis" if it dropped in unexpected and unprepared for.

I'm not opposed to open models at all, I'm just slightly sceptical on how much some people push their use compared to the value we get out of a dirt cheap subscription.

Propriety models are clearly subsidised by enterprise API contracts, so it makes sense to milk that for all its worth, provided one steers clear of any lock in so the option to switch is always there.

Jumping to spending time managing and self-hosting open models is a nice ideal but I think it's a distraction to jump on that train without proven benefits given the value that other plans deliver.

I don't mean I'm against the idea of open models, they were especially instrumental in Anthropic backing down from the "Fable only initially available 2 weeks" plan, which got extended up until Fable was over-taken by Opus in general usefulness.

It's my view that any company sized appropriately for Teams plan should be milking it for all its worth while it still exists, and it is a waste to lose that opportunity by jumping on open models too early.

If you're a larger enterprise then it would be a very different story, you'd already be paying more forced onto API pricing and would likely have the capacity to have a team look at open models without impacting delivery.

There's a lot of lobbying against open models on the grounds of a) China and b) open models mean we won't be able to prevent a hard takeoff.

Ok homie, deep breaths, you're among friends.

I'm with you here, just asking what the proposed stack is here, which you did not include.

If I understand correctly you're saying custom agent and possibly locally run open model, or are you saying no to all LLM / agent use outright? Either is fine, I'm not here to tell you're wrong, I'm just curious about what others are doing.