Just to clarify, and I know you weren't saying they are related, but this has absolutely nothing to do with AI or vibe coding or manager code.
It's a continuation of the Shai Halud worm and the lack of security around developer dependnecy installations, which has existed for a very long time.
Hackers have figured out that developers themselves are an ideal target due to how easy it is to trick them into installing something and how much private information they have on their machines (creds, cloud clis, mcps, etc.).
I see the problem everyday and am just playing devil's advocate but it doesn't really do a good job explaining the "why".
They hint at Django being a different level of quality compared to other software, wanting to cultivate community, and go slowly.
It doesn't explain why LLM usage reduces quality or they can't have a strong community with LLM contributions.
The problem is that good developers using LLM is not a problem. They review the code, they implement best practices, they understand the problems and solutions. The problem is bad developers contributing - just as it always has been. The problem is that LLMs enable bad developers to contribute more - thus an influx of crap contributions.
I've never had a good experience with individual metrics leaderboards. On one team we had a JIRA story point tracker shown on a tv by a clueless exec. Devs did everything they could to game the system and tasks that required uncertainty (hard tasks) went undone. I believe it contributed to the cog culture that caused an exodus of developers.
However, I love the idea of an occasional team based leaderboard for an event. I've held bug and security hackathons with teams of 3-5 and have had no problem with them.
> But Omarchy is a reminder that we live in a world where software isn’t just software, but the people who make it.
I get people are totally within their rights to ban movies/software/sports, etc. for creators whose beliefs they disagree with. However, software is the people who make it? I rarely, if ever, know the authors who create software or what they believe in.
Not shocking, a lot of time goes into making Vite and they need to make money.
One approach is to setup consulting services. Looks like Void Zero's approach is to start building value-add tools and features on top of Vite that are no longer free.
The decision that users must make now is whether it's worth the risk investing in Vite, assuming that more and more functionality will move to the paid tier.
Come on now, security isn't easy but it's not rocket science. If someone is competent enough to be developing applications they're certainly competent enough to do security correctly by researching first.
To be fair he's just pointing out a fact. If we're going to talk about this then let's get the facts straight.
I do not think he was justified in shooting but I also don't think the cop should face jail time or anything. We need to change our process in handling dangerous events due to swatting. It's the reality we live in.
My point was that "as soon as they opened the door" and "seconds later" are not the same thing. Go watch the body cam or do some research. There were 7-10 seconds with commands being issued to Andrew and he did not comply. Absolutely not his fault, I'm sure it was a very confusing situation. I'm simply pointing out that if we are going to talk about it, let's face the facts and not make bullshit up.
There was an investigation. It was concluded that the victim reached for his waist (maybe to pull up pants) after being told not to. Very very difficult situation for sure.
I've got no VR and no problems. Game infrequently, computer off for weeks at a time. Yes, Steam or Battle.NET will need to install updates but that's just like any console.
It's a continuation of the Shai Halud worm and the lack of security around developer dependnecy installations, which has existed for a very long time.
Hackers have figured out that developers themselves are an ideal target due to how easy it is to trick them into installing something and how much private information they have on their machines (creds, cloud clis, mcps, etc.).