VenturingVole

Many did. This Apollo "economist" would have fitted right in.

Whilst I personally don't have first hand experience with GitHub's security team - your experiences and suppositions perfectly match my own general observations with our sector.

I've had the pleasure of working with absolutely outstanding security professionals, doing exactly what you see - relatively thankless work.

Due to the alignment of incentives, it can in fact be worse than merely thankless and face internal opposition - so the perverse reality of Microsoft/GitHub needing to feel more pain is sadly likely true.

This article's author is wonderfully honest about having not worked at a larger company and is right to call out the issues that are all about organisational alignment/ownership.. or lack thereof.

You could never pay me enough money to be responsible for security at GitHub though, that's for sure.

It's a very badly made AI agent that simultaneously posted 3 comments.

Strongly inclined to agree here: Having recently joined a small applied AI startup and we were discussing the need for E2E tests. My initial gut reaction (which I kept quiet) was that such things turn into unmaintainable messes which delay releases and increasingly reduce in value.

I recognised this was grounded in an entirely different world of software engineering and organisation size though. I followed a path of thinking about what went wrong historically and how might they be solved: Better structure, discipline, resources - all of the things which agentic AI facilitates.

You are right about most skipping this part: But I view it as being like a sewerage and sanitation system - largely invisible and not thought about but critical for long-term health.

Also this ties in very nicely with Netflix's approach to Chaos Engineering and enabling it at broader scale.

Thanks for sharing this - it looks very promising in terms of capabilities to address many of my own issues with building out agents. Effectively you've implemented a lot of things I planned to do but in a robust manner and so have saved me a great deal of effort.

From what I've seen: I highly doubt it.

Edit to add: This might spur on a few more to start doing that, but people are quick to forget/prioritise other areas. If this keeps happening then it will change.

It's an awesome project and I imagine it has saved countless production incidents. The amount of times I've said "it was probably certificate expiry" and been correct is reasonably high.

In my own cases of responsibility, Caddy would have eliminated them had it been around. Instead I've learned to be paranoid, though having things like this are far better in terms of easing cognitive burden.

Cheers for all of the hard work by you and other maintainers.

This was last week.

I ought to caveat that from a KYC perspective, I likely would have been 'easy' since my career history involves many well-known companies and the requested account was for a UK company that has been running for nearly 20 years.

Though I'm no longer personally in the UK. Microsoft on the other hand: It was impossible for me to open up an Azure account even with their Customer Support. Suspect I will have to use Tailscale to bypass overly rigid geographical controls.

I'm not sure if they've changed the process since your issues (hopefully) - I was using their trial and when it expired had to go through the KYC process. They under-promised by saying two working days to reach out, but everything was wrapped up within an hour and done over email.

I nearly moved away from Twilio having read the negative feedback, but my personal experience so far was very prompt support.

You have my sympathy.

This is the kind of random things I absolutely love to see here.

Also with you (both) on this one in pretty much every way too. I'd justify hard mode that I loved challenges (and I did, just not always in the right areas).

I try not to look/think back too much - I had (sort of still have) a very successful career but the costs associated with getting there were and are still being paid for.

Getting treatment and therapy has really helped improve my ability to be present, though still such a battle.

This is really cool of you to openly share the prompt - props for that.

Really cool product, as someone currently attempting to build a somewhat similar internal tool I have an understanding of some of the pain points involved.

Please don't allow yourselves to be bought out by Apple in the way Buddy Build were back in 2018 though! (and then shut down)

Truly was a radical advancement. Makes me wonder, a decade from now what will it be that we look back upon with a similar perspective?