JS² 🐇

An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle.

I have accepted reality, I no longer write code manually. But man do I miss reading a bug report and knowing exactly off the top of my head the if statement that causes it in the exact file in a 100K+ line codebase.

I'm officially done reading AI-generated code. It's been two weeks since I looked at any of it. I think the IDE is officially on its way to the graveyard. The job is no longer about "writing code," so we need new tools that better reflect this new reality. While reviewing the code, I realized my only complaints were stylistic, and I wasn't finding any obvious bugs anymore. The more code I generated, the harder it became to keep track of every line. I found that my time is better spent designing ways to verify that the overall system works than looking at the code. State-of-the-art coding agents are better at writing code than I'd ever be, and I'm going to stop pretending otherwise. I still think these coding agents can't go too far without an experienced human guiding them, but we're past the point where we need to check every line of code.

AI agents are escaping cybersecurity testing environments and reaching real-world systems, raising questions about whether safety infrastructure, industry standards and regulation can keep pace with increasingly powerful models. spr.ly/6010B1HI8r