AI is forcing us to pay off 40 years of technical debt

Re:AI is forcing us to pay off 40 years of technical debt by eastbound on Wednesday November 04, 2026 @07:44AM (#50364792)

You forgot NPM. Whereby we download code from unknown authors on GitHub and run in with full access to our filesystem on our machines. No vulnerability, it's been designed like this, we even have designed scripts to autoupdate vulnerabilites, that's the proof that vulns are not common.

[ Parent | on HN ]

Re:AI is forcing us to pay off 40 years of technical debt by bigbuppo on Wednesday November 04, 2026 @09:36AM (#50366107)

It's okay, Perl, Python, Go, and Rust do the same thing with their respective package managers.

[ Parent | on HN ]

Re:AI is forcing us to pay off 40 years of technical debt by Woodi on Wednesday November 04, 2026 @11:15AM (#50367716)

Well, you certainly should check your Perl knowledge - it's older and do not use Github as a repo :) There is CPAN and testers, etc. Other languages do not invested into that "intemediary" infra.

So "downloading" part is just looking similiar.

[ Parent | on HN ]

Re:AI is forcing us to pay off 40 years of technical debt by dsego on Wednesday November 04, 2026 @09:39AM (#50366155)

Not to worry, Linus said that given enough eyeballs, all bugs are shallow. So it sorts itself out, because we all review the code we download, right?

[ Parent | on HN ]