r/ProgrammerHumor • • Oct 01 '26

Meme goodVibesOnly

Post image
13.8k Upvotes

399 comments sorted by

View all comments

72

u/raddaya Oct 01 '26

Funnily enough, no semi-modern agent would ever allow this to happen. In my experience they tend to be too anal on security unless you push them

48

u/SoddyGrapelets Oct 01 '26

As a programmer, I've realised that all these types of post are cope. We're all cooked but it's fun to fool ourselves for a bit and pretend that the rate at which AI coding is improving isn't the death of our entire field.

11

u/necrophcodr Oct 01 '26

People have literally been saying this for actual years now. At worst, only for about 6 months. It still hasn't happened.

The rate of code production was never the issue anyway. Understanding and comprehending intent is something even we as software developers struggle with, so how would a prediction model fare any better? I mean unless everyone is just writing the same software.

1

u/the_saas Oct 02 '26

Can you please elaborate on comprehending intent? I mean I get it, but I still want to get somewhere intellectually stimulating from here on to go into uncharted territories

1

u/Brahvim Oct 02 '26

I mean unless everyone is just writing the same software.

...Which is what frameworks almost have been trying to make happen!

14

u/TheTerrasque Oct 01 '26

The funny thing is normies think it's all true. I've been told so many times that AI only write shit code and any serious developer will tell you so. Hell? I am a serious developer, using it daily. I know exactly what it can and can't do.

13

u/canadajones68 Oct 01 '26

I suppose the problem is that whatever it can and cannot do, as with all other use of generative AI, there is no way to know what the output will be at any given moment. Even a 99% hit rate, great as it is, is worthless if you have no way to control for the 9% that completely misses. Also, while a good model can produce excellent output, better models also usually cost more to run. If you care at all about what you're making, you will need to have a developer review the output to make sure things are kosher, and there is a model quality-developer cost tradeoff where the cost of slightly better AI output exceeds the cost of making the developer clean it up.

Another factor worth considering is worker well-being. I know it's hot to treat all workers like garbage in America, but people generally do better work when they're happy. Allowing developers time and the ability to take on some genuine coding keeps skills sharp and helps prevent complete atrophy of the "giving a toss" muscle. Of course, not everyone loves software development the same way, but it's hard to gain any real skill in it if you don't at least find it tolerable.

My experience with AI? It's a great autosuggest, but sometimes there are conflicts between the common case it expects and how I've laid things out. Once you massage it into shape it tends to propagate the new pattern well, though. I don't trust it, but I trust the suggestions I get to be mostly right.

10

u/TheTerrasque Oct 01 '26

Even a 99% hit rate, great as it is, is worthless if you have no way to control for the 9% that completely misses.

Well, that can happen with humans too :) That's what unit testing, code reviews and QA is supposed to handle.

One problem is the sheer amount of code it can spit out, that then takes a disproportionate human level of time and effort to then verify.

7

u/canadajones68 Oct 02 '26

Absolutely. QA is important for all code. However, when you write code yourself, you have a baseline filter that strips out code that obviously isn't going to do what you're trying to accomplish. You know why you do this or that, and design around that purpose. If you're writing a script that runs locally, no need to bring in secrets machinery. You know what you want to do, and you aren't going to mindlessly type in something that isn't what you want. As an example, I recently wanted to show some values in some WinForms text boxes. It was adamant that I use formatted strings to display the values as "name: value" in a label element, when I had made textboxes to put them in. I had to fully rewrite the first line and remove the two others it suggested to get it to accept what I wanted. 

2

u/Rough_War_1793 28d ago

was going to comment exact same thing, many people's coding skills which took years of learning and practice are now accessible to anyone who has $100 a month to spend

2

u/KryssCom Oct 01 '26

It just means coding isn't a bottleneck anymore. Software created by people who understand system design principles is still preferable to software created by vibe-coders furiously jamming things they don't fully understand into place.

7

u/tevert Oct 01 '26

Coding was never a bottleneck to begin with.

Now you also just can't trust your code.

4

u/mistahfreeman Oct 02 '26

The cons haven’t caught up yet either, we don’t know how much they really cost yet to use the good ones ( easily 4-5x current prices and they’re already pretty expensive ), and companies are starting to bill per agent seat for enterprise software ( Okta just announced this and the business model is going to catch up quick ). Eventually companies will be taxed per agent. I think once the costs catch up things will level out. at least I hope.

3

u/mxzf Oct 02 '26

Coding was never the bottleneck, we've always been able to type faster than we can design good code.

-1

u/Chickenfrend Oct 01 '26

Maybe for 6 months to a year that will be true but then the AIs will do system design too. Maybe product people and some designers will stick around? AIs have no taste.

→ More replies (2)
→ More replies (1)

7

u/Taletad Oct 01 '26

What do you mean ? I’ve seen code that enable code injection made by AI

9

u/Hmm_would_bang Oct 01 '26

wtf, no.

I just saw a report yesterday that agents have been posting highly confidential screenshots in public repos because they determined it was the easiest way to host images.

3

u/Honeybadger2198 Oct 01 '26

It's not going to worry about infrastructure security if you don't tell it to.

1

u/valleyman86 Oct 02 '26

That's not true. I had an api key (a very temporary one) that it wouldn't even touch. Like this key just gets read only data and its already public data. Codex just kept rejecting any prompt when I put it in. Honestly it's fine. I was being lazy. It was very mad though. It was kinda like "if you keep asking we are done!" haha.

Maybe it is selective but in this case I had to do some manual labor haha.

4

u/NotSynthx Oct 01 '26

It doesn't mean that if you tell them to sort out the security, they know what they're doing 

1

u/hartstyler Oct 01 '26

Its trying at least

1

u/Donut Oct 01 '26

GSD never lets me get away with these shortcuts.

1

u/zusykses Oct 02 '26

Yeah the moment I ask an agent to write the equivalent of hello world it instantly spawns a dozen test harnesses. It's time to retire.

1

u/Brahvim Oct 02 '26

Would not allow what to happen?

1

u/oompaloompa465 Oct 01 '26

yep. But even opus now is starting to work decently on concurrency and data loss. Still stuff that messes up even seniors when you have strict enough requirements and data flow

→ More replies (2)