HolyLampshade

You have a hard unenviable job. No reason for me to make your day worse, and you were right to call me out. Sometimes we all need someone else to give us a little friendly reminder that this is not the time or place.

Thanks for all the work you put into making sure this place isn’t a cess pool.

That is a fair criticism. I’m letting my frustration with longer-term behaviors in social media influence my comments, and this is an inappropriate forum. I appreciate the correction.

They (folks who work at a place like binance) look at banks with contempt for that speed. And I don’t entirely disagree with them.

But you’re absolutely right, it’s hard to compromise something that moves at such an absolutely glacial pace.

Jamie Dimon does not have credentials to log into back office systems at JPMS. I’d be surprised if he even had access to execute wire/asset transfers via front-end tools.

Best a hacker could probably achieve is sending some sketchy emails or messages, but even there people are just going to confirm by verbally communicating with him.

Banks are actually the worst analogy for this sort of thing because there is a ridiculous amount of system federation and ultra-conservative system controls. It can take a month to get a simple route or firewall port opened on controlled networks (god I hate change committees).

Glad someone else noticed that.

I’m going to sound like an ass, but is this the sort of crap we’re going to see published in 10yr when all these crypto folk grow up a bit and start reflecting on their “glorious revolution”?

At least the Beanie Baby people realized it was ridiculous.

I guess the better comparison is dotcom folks, and they were pretty insufferable for quite a while

Hey now, that's for tomorrow when someone writes an article about LLM contribution to these security events.

I worked on a non-crypto, sensitive financial system two decades ago and similarly the end servers that ran the application stack were severely stripped down Linux instances with no shell, no interface to interact with outside of an application command channel, the hosts that could access that command channel were air gapped, and still the entire thing was wrapped in three layers of transaction auditing that were entirely disassociated from one another (different devs, different access, different source of data for auditing the same record).

I cannot look at how these companies are run with anything but derision. It’s institutional laziness, and it’s sloppy.

And the amount of process and control around a wire transfer is monstrous to reduce risk.

Watching crypto rediscover 100yr of financial regulation and system/process design has never not been amusing to me, esp as someone who works in an asset that has solved the custodianship problem (not that people in the industry aren’t actively attempting to light those safety rails on fire to make a few extra bucks).

I think what’s not being considered here is if the barrier for entry of a product is so ridiculously low that a single individual can kick off a few agents to build it then work the sales channels, the companies buying the products can just do the same thing.

The value in buying a product or service from someone else is access to expertise, an expectation of support, and on some level the distribution of legal and financial/time risk in developing a new product. If you can do it all with some LLM then especially that risk of building a bespoke product is all but obliterated.

Anecdotally I started to see this at my last gig where bizdev folks were writing their own tools and in some cases their own little micro products (things 15-20yr ago they would have had to purchase from a third party, or get internal dev to work on). Now, I certainly don’t want to deal with that sort of technical debt, but plenty of firms don’t feel the same way (clearly given how much layoffs have been impacting everyone on the SWE side).

The first paragraph of the article drove me insane for that reason. MNPI is one of the bedrocks For a stable market system. If you trust, on some level, that the people who are counterparty to your trade and not pulling one over on you you’re more likely to participate in the market. The more that trust degrades, the less likely people are to want to interact with the market. The fewer people, the worse prices/spreads get.

Efficient and tight markets are almost entirely predicated on being able to determine that any informational asymmetry is irrelevant over differing time horizons.

Oh boy do I have opinions (mostly in line with your’s), but I actually think there’s another factor of “Devs left to the own devices will still write software.” It’s a “problem solving” skill set with a very low ceiling for implementation. That problem solving ends up as more internally developed (or newly integrated third party) applications that end up in the operational critical path, that now also need to be supported.

It’s something like a cargo cult. We have this system because of course we need this system and it “insists upon itself”.

The further development is removed from the final “product” of the company the more this crap piles up.

So, I agree that in some instances it’s intentionally obfuscated, but there are others where the bloat simply cannot be calculated.

Completely agree. The analogy I’ve used is the difference between someone working at an oil change shop vs a mechanic on a Formula 1 team.

And that isn’t meant to denigrate the oil change person. There are millions of that person to every one person working for an F1 team, and it’s important work. But, obviously very different things.

I think it is more likely SWE thought they were not replaceable where any function in a company is replaceable with enough motivation (whether wise or not).

The other issue I’ve been mulling over is two part. What in the hell have all these SWEs been actually doing? (As in, what software were the vast majority contributing to?) By extension, were many of these projects critical to the bottom line?

I guess what I’m getting at is if you can have a robot do a sloppy job of what you were doing before, and have that still be ok for the organization, maybe what you were doing in the first place wasn’t critical.

I’m not saying it’s not short sighted (I think many orgs are subjugating themselves to external entities, and are going to be violently bit in the ass when suddenly no one left in the firm has any comprehension of how all of their systems work), but, and I don’t say this lightly, maybe the SWE “profession” has a bit of bloat it can afford to shed?

I look forward to the LLM equivalent of lmgtfy in its original form.

I know I’m bordering on repetitive and strongly negative, but the combination of the two barriers you mentioned has all but halted all of my interaction with agents.

Even ones that cannot be easily dismissed (like the agent at the top of Google search) are often subtly wrong in a way that requires significantly more effort on my end to parse the loquacious output to determine where the inconsistencies are.

Look, can they be useful to generate the html or jscript for humanity’s 9 billionth iteration of a web form? Sure. But man, I wish sanity had reigned and people had applied ML models in general to more substantive and beneficial projects.

(Before anyone chimes in, I’m familiar with implementations of ML applied to esoteric domains; but by their very nature these don’t get all the news cycles, or hiring, or any of the other absolute insanity that the domain seems to contain)