Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- I must say, I had this thought. While everyone thought AI written code will inevitably lead to slop, bugs and security issues, I had the feeling the exact opposite happens. I can task an AI agent with striving for the quality metrics I want to see, and it will always work along them. No fatigue that leads to errors, almost no oversights even in more complex systems, etc.
This may actually be the time where it becomes feasible to create high quality software with reasonable (human) effort.
What we are seeing with AI generated incident reports causing issues is maybe mostly an impedance mismatch between people who have fully adopted AI and people /projects who haven't.
by stkdump - This is just a rust proselytizing, move alongby matt3210
- > GNOME is primarily written using unsafe programming languages where simple mistakes in our code lead to devastating consequences for our users, and we make these mistakes all the time. No matter how much we try, GNOME developers will fail write secure code when using unsafe languages like C, C++, or Vala: it’s just too hard for even experienced developers to do properly.
Once I saw that I knew that this article was a ridiculous stack of bullshit. Gnome might have some bugs and shortcomings but now millions desktops are using Gnome based window manager for decade and the world didn't collapse yet.
And let's not forget the ridiculous assumption that you can't handle a software quality without using AI...
by greatgib - why not have AI do more quality control?by tonymet
- The tidal wave of reports will continue, until reporters stand to lose real money from submitting bad reports.
Reporters that submit useful, quality reports, should not only get their money back, but also a dividend on the money taken from low-quality reporters.
by kneyed - What is the "era of ostriches"? Is that a reference to some meme? Would someone explain the meaning?by pamcake
- Producing correct code is insanely difficult. It's hard to convey this to junior or even mid-level engineers.
In fact, for many complex projects, it's essentially impossible, even with AI.
Eventually, you get to a point when you have every feature you could possibly want but the list of tradeoffs is long and yet not worth trimming.
by jongjong - > any use of Cargo to download dependencies dramatically increases supply chain security risk. > Currently the best solution is to not use programming language package managers, but GNOME’s Rust code depends heavily on Cargo.
That's what an ostrich would say. How is your manual alternative to manage supply chain any better than this explicit one where transparency is standardised?
> I don’t want to downplay the severity of security issues either.
That's exactly what you're doing
> Security vulnerabilities are not even the biggest digital security threats ... a distant third place
Downplaying the 3rd biggest issue
> Security bugs are just bugs, and they’re not necessarily more important than other bugs.
Downplaying the danger.
by eviks