scarface_74

There is a difference between a SaaS offer where you are running your code and serving multiple customers on one server/set of servers and running random customer code like Vercel.

And the latest version of Firefox requires the version of Android released in 2017… is that really a win?

This is completely different. While for Uber and AirBnb as the person delivering the service I have to worry about a private citizen either doing harm to my property (more statistically likely) or my person (much less likely), if I am pulled over by a cop carrying illegal goods I have to deal with the law enforcement.

Insurance can take of property damage.

My personal threat model is:

1. Law enforcement with qualified immunity and a “monopoly on [legalized] violence” .

.

.

99. Everyone else

I review AI generated test of AI just like I reviewed tests of developers on a team I was leading.

There is no “morality” when it comes to my job. Outside of my feeling morally obligated to give my employer the benefit of all my accumulated skills for 40-45 hours a week in exchange for the money (and in a previous life RSUs) in my account.

I feel accountable to my coworkers and customers to deal with them fairly and honestly.

What other moral obligation should I have besides my employer, coworkers and customers?

And then as experience developer you would have to try one of the other tools in your toolbox. Why should someone tie a hand behind their back and not use an LLM out of some sense of nerd pride?

That would require the logged in user to do something stupid. That’s like saying what’s to prevent the authorized user from emailing his credentials to a random person.

And that same user is already trusted to have admin access to the entire organizational AWS credentials - I did say it was an internal management site.

The lambda itself only has limited permissions to the backend. The user can’t do anything if the lambda only has permission to one database and certain rights to those tables, one S3 bucket, etc.

Heck with Postgres on AWS you can even restrict a Cognito user to only have access to rows based on the logged in user.

And the database user it’s using only has the minimum access to just do certain permissions.

My responsibility is to make sure my code meets functional and non functional requirements. It’s to understand the *behavior*. My automated unit, integration, and load tests confirm that.

Someone thought I was naive when I said my vibe coded internal web admin site met the security requirements without looking at a line of code.

I knew that because the requirements were that anyone who had access to the site could do anything on the site and the site was secured with Amazon Cognito credentials and the Lambda that served it had a least privileged role attached.

If either of those invariants were broken, Claude has found a major AWS vulnerability.

Exactly this, I lead cloud consulting + app dev projects. Before I would have staffed my projects with at least me leading it and doing the project management + stakeholder meetings and some of the work and bringing a couple of others in to do some of the grunt work. Now with Gen AI even just using ChatGPT and feeding it a lot of context - diagrams I put together, statements of work, etc - I can do it all myself without having to go through the coordination effort of working with two other people.

On the other hand, when I was staffed to lead a project that did have another senior developer who is one level below me, I tried to split up the actual work but it became such a coordination nightmare once we started refining the project because he could just use Claude code and it would make all of the modifications needed for a feature from the front end work, to the backend APIs, to the Terraform and the deployment scripts.

I would have actually slowed him down.

He already does. He is cutting funding for blue state initiatives that were already allocated. Of course Congress should have the power of the purse. But the Republican Congress is spineless as is the Supreme Court.

Before now, Republican representatives would never let even a Republican President usurp their power.

Oracle is not fine. They are borrowing money hoping to get paid back by money losing OpenAI propped up by VC funding.

No business is going to run workloads on OCI outside of ones running Oracle. They a They are a way distance fourth in cloud. I’ve been working in cloud consulting for five years including the first three directly at AWS (Professional Services). No one worried about having talking points about competing against Oracle.

Microsoft, Google and Amazon have both internal products that can benefit from inference and cloud hosting.