a clown car of clown cars that deploys another clown car, that explodes
https://www.youtube.com/watch?v=vnFKkBBzpVg&list=UU9rJrMVgcXTfa8xuMnbhAEA - video
https://pivottoai.libsyn.com/20250829-vibe-coded-build-system-nx-steals-vibe-coders-crypto - podcast
I know it’s been said thousands of times before, but as a software developer I’ve never felt a greater sense of job security than I do right now. The amount of work it’s going to take to clean up all this slop is going to be monumental. Unfortunately, that kind of work is also soul-deadening.
Just vibe code a solution, and then when that goes wrong vibe code the solution to that. Should keep you in work for decades.
A lot of companies use “vibe coding” an excuse to offshore software development work to cheaper countries without anyone noticing.
But yeah it’s not gonna work out in the long term for a business that:
- Encourages people to submit random nonsense to the codebase instead of doing actual work
- Removes all entry-level positions
- Lays off anyone who knows what they’re doing
That’s how you get a codebase that kinda sorta works in a way but is more evolved than designed, full of security holes, slow as heck, and disorganized to the point where it’s impossible to fix bugs, adds features, or understand what’s going on.
That’s how you get a codebase that kinda sorta works in a way but is more evolved than designed, full of security holes, slow as heck, and disorganized to the point where it’s impossible to fix bugs, adds features, or understand what’s going on.
Well, one of the ways *glancing at the code I’m responsible for, sweating profusely*
Yeah, idk what parent poster is talking about. I totally didn’t spend the bulk of yesterday afternoon redoing a small project from scratch because I couldn’t decipher what I did two months ago. Nope. That would be ridiculous! So glad my human-written code is so much better than AI code.
It reminds me of the people still being paid to clean up or maintain the large Fortran and COBOL codebases
By my guess, its gonna take about a decade to fully clean up the mountains of slop code that this AI bubble’s gonna leave. It’ll certainly be lucrative (and soul-deadening, as you note), but as someone else has noted before, the riches are exclusively going to experienced devs and senior programmers - for anyone trying to break into the industry, they’re probably gonna have to find work somewhere else.
I wish I could agree, but I was one of the countless laid off to make way for our new overlords
Thanks for this write-up, I just saw the advisory and didn’t realize just how dumb the entire thing was.
absolutely appalling figuring it out, it really was “it can’t be this stupid, I must be understanding it wrong”
then I got to the bash injection
and the proud “Generated by Claude Code”
and welp
More than two decades ago, I dabbled a bit in PHP, MySQL etc. for hobbyist purposes. Even back then, I would have taken stronger precautions, even for some silly database on hosted webspace. Apparently, some of those techbros live in a different universe.
The malware stole a lot of people’s login keys and, apparently, their crypto wallets.
Seinfeld "Shame".gifMost successful AI company.
A pull request is when someone submits new code to a software project. On 21 August, NX added some configuration to look at the titles of pull requests and check they were correctly formatted.
I find it immensely hilarious that this security hole was blown open on my 25th birthday. Its almost poetic.
