Wonder if he tells his boss to "I pushed critical code to production without even taking a look at it" or is it just for show on HN
If there is a bug, it will be fixed quickly anyway, so only a few users might ever see it, or see it only for a brief time.
Even when manually coding, projects still have issues and bugs, I don't think much changes in that aspect now, if anything, there are fewer bugs now in most high quality apps than before, due to AI catching more issues. See all the vulnerabilities found in old core code and libraries nowadays, that humans didn't find.
>>Sure if your building toys, that's fine, otherwise, why take the risk in being liable for not looking at what the code does and then believing it is high quality?
>>Don't you see the contraction you just did there?
I wouldn't trust anyone who refuse to use LLMs for programming. Their code is worse, they test it less and it takes longer to write. For me "no LLMs" attitude is a sign of incompetence. Good for hobbyist trying to keep their brain active but that's about it.
That is even more so for critical infrastructure. Just look at the mess human coding is when it comes to security. LLMs are fixing it at the pace we couldn't even imagine a year or so ago.
So does that mean you should never look at its code?
If a fault in the software occurs even after testing and there was an investigation, will you admit in the postmortem report that you did not look at the code at all and blame the agent for the error?
> I wouldn't trust anyone who refuse to use LLMs for programming.
Did I say I refuse to use LLMs for programming? I am telling you to check the agent's work.
I would not trust anyone who DOES NOT check the changes of an agent's code when using them for programming in highly regulated industries or in critical systems. For most companies in the Fortune 500, it is irresponsible to not check.
> That is even more so for critical infrastructure. Just look at the mess human coding is when it comes to security. LLMs are fixing it at the pace we couldn't even imagine a year or so ago.
No-one argued against that and it does not mean that you do not check with the agent at all even if the agent believes that they "fixed it".
Well that doesn't make sense if you are writing code that is going to be used on critical infrastructure.
Imagine a disaster were to happen and you said to the auditors that "I don't know what I am doing nor did I look at the code" and you cost the company tens of millions of dollars.
Sure if your building toys, that's fine, otherwise, why take the risk in being liable for not looking at what the code does and then believing it is high quality?
Don't you see the contraction you just did there?