mrweasel

Hang in there, in a few years we'll be mining gold cleaning up the mess.

I work in an AI sceptical organization, it's not that we don't use AI agent or consult chat bots, but they are kept a good distance from production. Talking to other SREs in AI heavy and AI first companies I don't see that ending well. SREs struggled with operating applications from developers who cannot or will not understand how computers and the internet work. Now many of the junior developers are even worse and some of them are given the title of "DevOps" and they are using AI to create some of the most broken ass Terraform code and bastard Helm charts to run their broken code. Some SREs are spending more time fighting agents and agent written infrastructure code than they would have, had they been allowed to write it themselves.

If tokens becomes to expensive, we're left with a ton of broken code and infrastructure that can only be managed at an inflated cost. There will be good money to be made consulting and cleaning up the mess of AI boom.

Would that really help, if you install the extension it's running in the VSCodium instance on your machine... or is it running in the vscode-server?

Obviously Anthropic didn't develop a malicious extension, but did they publish it? Did it sneak in, in a 3rd party library, or does someone have access to their marketplace account?

That is a really good question, because you almost can't do it. You could download the extension, diff it against the previous version and read all the code. Expecting people to do that it just a bit much. At some point we have to trust someone and in this case it will be interesting to see if it's the marketplace or Anthropic we couldn't trust.

You mean on the Microsoft VSCode marketplace? The version has been yanked from there as well, but that could just be a precaution and to avoid confusion about having the same version be simultaneously infected and not infected.

This very much illustrates the danger of just carelessly installing untrusted software on your machine. In this case it happens to be code from Anthropic, but it could have been almost anyone. I'll be very interested in see the explanation from Anthropic, because of all the extension developers they should have the best tools for finding issues like this. LLMs have proven pretty good at finding security issues, so did they simply not let their own AI tools vet the code before shipping it? Or was the extension infected later, because in that case every single extension on Open VSX could be at risk.

Sure, but the pizzeria charges less than $4 for delivery and don't want a tip.

I completely understand the grocery deliveries, it's a trade off, time vs. money. Personally I think the delivery costs are to high, but I also live four minutes away from the supermarket on foot. For others it's one less thing to deal with and they can do the shopping in the evening when the kids are put to bed or have the groceries ready when they come home after a long day. For them the delivery fee is well worth the value the service provides.

It's the $10+ for getting McDonalds multiple times a week I struggle with. People are free to make that choice obviously, but I feel like the delivery services are praying on people who are already struggling, especially when they team up the Buy Now Pay Later companies.

From the article:

> they are not hesitant to use a coding assistant, they are hesitant to go all in and let the agents do all the execution.

They are embracing the use of coding agents, but they still want to be in control. That also matches what I see from my most talented colleagues. They outsource certain tasks to the AI and verify the output.

My somewhat unpopular opinion is that only very good developers are able to use AI coding tools somewhat safely. They could have written the code themselves, but it's faster to have the agent do and then verify. The rest of us couldn't write the code, at least not when we start on a project. When we finish, we have some of the skills and could rely more on the AI tools if we were to do it again.

I knew about Spain doing it to align with Germany, but I had no idea that France used to be UTC.

> So from an utility and democracy point of view the wellbeing of the majority

Or you know, you could just put countries in different timezones. Apparently that's easier than convincing people that the workday doesn't need to start at 8:00 (or 10:00 in the case of many in Southern Europe).

> Spain is already in the wrong time zone for standard time

That's probably even more of an issue for Spain, made even stranger by the fact that Portugal is in the "correct" timezone.

It apparently mattered enough that Russia reverted it's decision to stay on DST.

But I do live in the North and in the EU... I care a create deal about not being stress and depressed.

It is actually an issue and in some sense I think there is a case to be made for a timezone split between northern Europe and southern Europe. So e.g. putting Scandinavia in UTC +1 and Spain and Italy in UTC +2. Where we draw the line is tricky, because I doubt that nether France or Germany would want two timezones.

Most I've seen are just used to RDP into a Windows box anyway, so probably not. That does make it a little strange that no one seems to design a nice looking terminal PC.