Remix.run Logo
▲ beardbandit 5 hours ago

I find it a breath of fresh air to be able to tackle backlogged tech debt items simultaneously with business priorities in parallel and stuff like that.

That being said, I can't see this entire field existing in five years anymore. I'm hoping for at least two more years, but who knows?

This stuff is coming for all white collar, the barrier to entry is completely gone now. Maybe not the barrier to mastery (yet), but the bottom has fallen out.

▲rwyinuse 4 hours ago | parent | next [-]

I agree, and the field possibly not existing in 5 years is a big issue. Like, how are young people supposed to take a mortgage, start a family, or any other big commitments like that, if their whole education and work experience may be useless in a couple of years?

I don't care whether I'm writing code or reviewing LLM generated stuff, but the prospect of losing my job and having to survive on welfare for the rest of my life isn't nice.

▲istypwbasofotso 25 minutes ago | parent | next [-]

Where is the money for welfare coming from if tax from working people is drastically reduced?

▲ctoth 4 hours ago | parent | prev [-]

From my perspective this is the thing that the people who have been talking about how good these damn things have gotten now were trying to get you to do all along. Understand that they're getting better, it doesn't seem to be stopping, and we really, really need to figure this part out ASAP.

What seems to happen though is it always gets pulled into a discussion of "But they can't X" or "but ma taste!" or the old generic canard "can't replicate what's not in the training data"

All I want is for people to see that yes, this is happening, accept it, then figure out what a good response would be to it. Instead we get everything from stochastic parrot parrots to "Dario is just marketing when he tries to warn us" to the old an thoughtless "But if you think it's bad, why are you doing it?"

Please.

▲beardbandit 3 hours ago | parent [-]

I mean look at our response to climate change and then look at our response to COVID.

Change doesn't happen until we are at the absolute brink of IMMEDIATE catastrophe.

▲tomrod 5 hours ago | parent | prev | next [-]

I am not sure mastery every truly goes away. But it is given the chance to evolve.

▲bjornsing 5 hours ago | parent [-]

Navier-Stokes…

▲tomrod 5 hours ago | parent [-]

... could never have had a proof attempt presented without the mathematicians setting the stage and working to verify the proof.

I think you might be viewing AI and humanity as a zero sum experiment. It's really not. Go read some David Brin (Existence is a good start). We don't know all the positive and negative aspects to come, but we aren't in a dark forest situation. Existentially, AI is here, what are we going to do with it?

▲ofjcihen 5 hours ago | parent | prev | next [-]

I see sentiment like this (which is valid; it’s a different perspective), and then I look at my company’s current caseload of breaches and how most of the (insane) increase in business we’ve received is caused by poorly coded apps with obvious security issues, along with the inability of orgs to remediate those issues or adequately follow incidents because no one actually knows the applications anymore.

And I’m wondering if this isn’t the enormous amount of organizational debt from having security second to everything finally coming calling.

▲IshKebab 5 hours ago | parent [-]

Presumably those poorly coded apps were written at least 6 months ago though... Enjoy it while it lasts.

▲ofjcihen 5 hours ago | parent [-]

Unfortunately for everyone, no.

I’ll give you an example of one that was written recently actually.

The initial compromise happened because the app explicitly did not verify auth claims when a specific string was in the ISS field. Well, fuzzers exist and are common.

The next issue was that once you’re in, there was no delineation between admin and regular users. Everyone had all privileges if they just made the calls.

Anyway, we did the usual post-remediation investigation and write up. The devs were of course using the latest models, as they were instructed, and the issue stemmed from a problem they’d been having integrating a specific company into their auth scheme.

Eventually, after many enumerations, the model opted to just skip auth altogether if that companies ISS was present. The devs, being in the habit of just accepting the changes did so and because of the nature of the code implemented nothing caught it in the pipeline.

This is sadly an incredibly common story and it won’t be fixed by models improving I don’t believe.

▲bossyTeacher 3 hours ago | parent | prev [-]

- Business priorities are potentially neverending so the expectations will just increase in relation to the increased capability.

And yeah, I agree, there is no bottom anymore.