News for hackers. Stuff that matters.
Re:Redesigning Source Control at Anthropic by Fordec on Tuesday October 13, 2026 @06:48PM (#50080031)
I have a theory (loosely held, it's just an idea, not a belief) that this could lead to something I call Evolutionary Architecture. That instead of waiting for vulnerabilities to be discovered in code, that systems could end up with code being changed and re-implemented by agents so fast that attacks aren't able to probe for attacks because they end up probing code that by the time the answer is come it, in production that code no longer exists because it was moved to another language or something. The change to prevent vulnerabilities isn't the reason for change, but the change has defensive side effects.

All of this may be slightly inspired by the Militech neural matrix in Cyberpunk 2077

Re:Redesigning Source Control at Anthropic by post-it on Tuesday October 13, 2026 @07:30PM (#50080418)
I've been developing a weaker version of this line of thought for code reviews for large architectural features.

A big motivator of thinking architecture through really well is that although the software may work just fine now, a good architecture will make it easy to add a feature a year from now, whereas a bad architecture will necessitate significant rewriting.

But significant rewriting is cheap nowadays, so in code reviews I put a lot more weight on whether it works today, and a lot less weight on whether we'll need to change it when making a different change.

Entire classes of things like "should this be in this component or split out into its own" just don't matter anymore because no matter how tedious changing that might be once there's a ton of things depending on it, that's the kind of thing AI can do no problem.

Re:Redesigning Source Control at Anthropic by GrinningFool on Tuesday October 13, 2026 @09:35PM (#50081322)
It seems those classes of things are more important than ever. It's not about how tedious it is - it's about the models being able to build accurate context and understanding. All the same things that made it better for humans also makes it better for models. More specifically in this context, well-maintained code results in fewer bugs and lower token usage.

I tend in the other direction when I can (for components and microservices - harder for monorepos): I encourage refactors on a continual basis, as it prevents the models from getting bogged down with the way the system used to behave across changes.

Re:Redesigning Source Control at Anthropic by xyzzy123 on Tuesday October 13, 2026 @10:15PM (#50081555)
I think this works well until you get into data, state, history, external interfaces etc. Large scale data migrations are still risky, anything with external consumers you can't quickly change is risky, etc. Internals inside a service I agree, yeah you can let it slide a lot.

I also found though, with agents you can quickly create large amounts of code, when you go to refactor / fix some design aspect that touches large parts of the system this consumes a lot of tokens and actually still takes meaningful time.

It's like, with a digger you can quickly create a hole! Digger can quickly clean up the work of 10 people with shovels! But if you use a digger for 1 week and you were putting the dirt in the wrong place, you find you have a HUGE pile of dirt to move and will still take a long time to clean up.

Directionally I agree with you, but I think design still matters.

Re:Redesigning Source Control at Anthropic by jimbokun on Wednesday October 14, 2026 @12:06AM (#50082272)
AI can do it but will cost a lot more tokens than if the code is architected for easy changes.
Re:Redesigning Source Control at Anthropic by gregdeon on Tuesday October 13, 2026 @08:40PM (#50080960)
"Security by Obscurity" is being replaced by "Security by Velocity"?
Re:Redesigning Source Control at Anthropic by Fordec on Wednesday October 14, 2026 @12:32AM (#50082411)
The Military has the "Survivability Onion", Security through Obscurity is the "Don't be seen" layer, while "Security by Velocity" would be the "Don't be acquired" layer.
Re:Redesigning Source Control at Anthropic by x0_Dev on Tuesday October 13, 2026 @11:13PM (#50081950)
This is pretty close to Moving Target Defense (MTD) and Binary Diversification.
Re:Redesigning Source Control at Anthropic by Fordec on Wednesday October 14, 2026 @12:21AM (#50082349)
TIL! Close, just taken up a notch that wasn't feasible before where MTD was more configuration focused. As CPUs are to FPGAs, MTD would be to this. Rather than telling the config to change on the fly, the code changes on they fly. And rather than having multiple Binaries prepared, the pipeline of changing binaries are more just-in-time than batched.