The Next Phase of AI Security Is Going to Be Less Fun
More people get to build software than ever, but the attention now required for security and breach recovery is draining a lot of the joy, especially for teams with legacy systems to bring up to date.
The security situation we are starting to live through is good for business for folks like me, but it kind of bums me out.
I think it's exciting that more people get to build software and capture the joy of creating something new. The new reality of how much attention is needed for ensuring security and recovering when AI discovers waves of new vulnerabilities and / or allows bad actors to breach your hosting and steals your credentials kills a lot of that joy and constrains what you can do safely.
The tools will get better and we'll eventually get to the other side of this and fix all the vulnerabilities. But this next phase is going to just be less fun for everyone I think. Especially for those of us with responsibilities on legacy software systems that need to get safely up to date, and fast.
Related insights
You're Going to Need to Ship a Fix in Minutes, Not Days
Agents are making it cheap for attackers to find unlocked doors. The window to invest in CI, test coverage, and fast safe rollback is now.
Every Product Should Be Working Toward a Zero Known Bug Backlog
P4s don't have to languish at the bottom of the backlog anymore. With the right investments, fixing bugs as they arrive can cost about as much as triaging them used to.
3,122 PRs This Year, and Most of Them Are Just Bets
Shipping thousands of changes doesn't create value on its own. Every change is a bet with a cost, so the real leverage is using your tools to make better bets, not just more of them.
Get More Like This
Follow along as I build and share what I learn
Found this helpful? Share it with your network!