jjice

Maybe it is, but I know that lots of us used GitHub way before Actions launched. I think even if Actions wasn't free, GitHub would still have a massive advantage because it is the most well known place to host code, especially by less technical users (which is where I see a lot of finger pointing going with the increase in GitHub usage).

I would not be surprised if a serious amount of this usage is not user-intended and instead the LLM just inserts some sort of CI job off the bat and people roll with it.

Agreed. Happens on my personal Linux machines (debian based), but not my work Mac. Has for years I think.

Not everything is writing code and search. My uncle works in mortgages and the (very large) firm he works for is entirely Gemini. The way he talks about it is with wonderment in his eyes while he goes into detail on how it went through multiple documents and found unaccounted for cases. I think Google is doing fine in these kinds of industries.

I wouldn't even bet that Google is better than OpenAI and Anthropic for these categories, but they seem to be well used outside of our direct space.

To clarify, I'm not promoting the previous comment, I'm just clarifying what the date was

Even outside of the human body, appreciating things that have aged, served a purpose, and have been repaired so they can still accomplish that goal is a beautiful thing.

Kintsugi and wabi sabi are probably the most convenient terms to capture this.

I find nothing more satisfying of clothing that I've personally patched up and repaired the sea on. I have memories tied up in that. The same goes for the scar on my wrist from falling off that longboard in college when I was trying to learn (that was the end of that).

I think I get where you're coming from. I've worked mostly on small teams (sub 30) so it's always been on us. The engineering leadership never prioritizes security unless it's something as big as the log4J stuff because it was on customers' minds.

That said, if they're software packages from something like Node or PyPI, I do think that it falls on the developer. If the point is that leadership needs to give devs the ability to act on that, that's very fair.

I fought hard about four years ago at a previous company to upgrade us from PHP 5 to 8 because I think 5 was going EOL or something like that (could be wrong about that now). Based on my experience in software, I have to imagine the vast majority of normal developers do not give a damn about security in being in security patch lifecycles on software.

The parent comment specifies they're existing solutions:

> There are three existing realistic solutions

I find that LLMs can write poorly structured code if not given a good foundation to do so. The existing code in a repo is what the LLM will see and generally output similar code to.

Given that, I'd recommend the mainstays on good general software design. One of my favorites is "A Philosophy of Software Design" by John Ousterhout. Good general design practices.

Other than that, I think a lot of books generally stay relevant. If it's topic specific, it'll give you a good background on understanding of that topic so you can make sure you or an agent are making sound decisions. Architecture of course is more valuable than ever.

It felt to me like it's more of a neat fact rather than a measure of quality.

I don't know about turning it off entirely, but I just did this after reading your post and I clicked the "not again" option and the whole thing went away.

Ah that makes this make way more sense. Thanks for the insight.

The idea of keeping my passwords in my work-sponsored password manager just sounds absurd. Who thinks that's a good idea? What happens when you leave the job?

Did you record over 30 seconds?