Cthulhu_
But anecdotal (friends, family, colleagues, myself), these coping mechanisms aren't permanent; masking constantly once you're living with someone else is pretty much impossible, fatigue/burnout kicks in often in people's 30s, and a lot of coping mechanisms people learn as kids are no longer effective or desirable as adults (often known as neuroses). Then there's attachment issues, also picked up as children. These may apply to everyone, but they're exacerbated for people with personality disorders, mental health issues and/or neurodiversity.
Figuring out what are "built in" / genetic / medical conditions, unhealthy coping mechanisms or trauma responses is a long journey that a lot of people are going through.
Mass Effect or Dragon Age could've flopped like Anthem did and we would never hear from them again. In fact the first Mass Effect was pretty rough in terms of gameplay, as was the first Witcher game (and arguably the later ones and Cyberpunk because they all needed serious rework and bugfixing after release). Yet they're still popular because something else compensated for their technical issues.
It's a really weird market, it's both one of the biggest industries in the world (bigger than music and movies combined), yet also high unemployment and poor working conditions / work/life balance, with AI throwing another spanner in the works. Meanwhile a lot of people that want to work in it aren't just in it for the money, they have genuine passion for the craft / industry - which is actually rare in most IT jobs, most enterprise jobs aren't exactly exciting material.
And this is where things get... a bit weird - game developers that want to make a living out of what they do are competing with people who'd do it for free and who have no risk if their thing fails. It's the same in most creative fields - why would my employer pay for a band or dj at corporate events if we have some hobbyists working for us that will play for free / for fun?
Which isn't a new problem, it's just a lot faster and more prevalent. I really hope Valve (the premier marketplace for PC and indie games, alongside Itch) cracks down on it and hands out things like a "seal of quality" to separate slop from serious attempts at making games.
(because they earn money from everything and they have no real competition they don't actually crack down on slop, just like the various app stores don't care much about shovelware as long as it earns them money).
It's indirectly related to health insurance cost, as we have a GP shortage and they (I presume?) realized a lot of people are making appointments and wasting a GP's time for trivialties like a cough or cold.
I'm pretty sure they already have, or are experimenting with having people go through an AI chatbot first. This is already very much a thing with any kind of customer support. It's not a new development though, the preceding generation was conversational interfaces.
I wish commenters (in general) would do a bit more "steelmanning" before asking questions about why something is (in this case) connected to the internet.
So the amount of new code added is limited by processes and product management. Add to that that newly added code can get a lot more checks on it now, and new code will be more secure too.
I also don't think your main premise (adding holes faster than we can find them) holds up, but that's another matter. TL;DR I think we're in a high intensity period right now, but this time next year it'll be quiet in comparison - possibly quieter than before AI code scanners were a thing.
1. The cost of running AI is dropping down to "free" - there's open weight models, open source tools, and guides on running your own if the long list of suppliers isn't good enough for your use cases.
2. Vulnerabilities have always been a risk; AI is not a panacea. The pre-AI best practices still apply. Furthermore, a huge percentage of vulnerabilities are in 3rd party tools and systems, which are systematically being scanned and fixed and/or exploited, then fixed.
You mention "the free software community" in your last sentence though - this implies the code in question is open source, so it's able to receive plenty of improvements from anyone with access to these tools.
(if you live in places with healthy worker protections, a company can't just fire someone, they need reasonable grounds; bar that, they need to first try and place them somewhere else in the company, and if that doesn't work, firing involves paying a severance fee. In an ideal and morally correct situation anyway, in practice they'll use dodgy corporate structures to bankrupt companies before paying or retraining anyone)
No it's not, but look at other countries with high unemployment and no UBI to see what the result is. Ranging from protests to migration.
I had Claude build me a map tool to calculate travel times from one or two points to every street in the city; not only did it do that, it added various scenarios, speed limits, usage of bus lane toggles, different visualizations based on thresholds, and a tool to scan for optimal starting points based on a configurable grid size. etc.
This overcompleteness is a mixed blessing though, in this case it was great and convenient, but if it was e.g. documentation intended for human consumption then it wouldn't be so great, and if it was a letter written to the county that they should consider another location for a fire station it'd actually be pretty ineffective.
Boring reports are also important for historians, although granted, not everything is actually important in the long run.
(this isn't a new observation / thing, see https://randsinrepose.com/archives/nadd/ originally from somewhere in the 2000s)
But now with AI it's easy to generate a lot of prose. I'm thinking for example of the merge request descriptions my colleague submits. And here's the thing, it's not even bad or incorrect - I read it thinking, if I were to really sit down for it, get into The Zone etc, I could crank this out myself.
But I don't because honestly the MR is relatively trivial and can be described in just a sentence or two. Style and accuracy aside, my current take is that LLMs write things that humans wouldn't bother with, because it's too much effort and there's not enough value.
I mean it's an MR for an enterprise library project, the chances that anyone will ever read that MR description again once it's merged is close to zero.
That said: LLMs themselves don't get that, they will read everything you tell them to with the same amount of attention. Granted, their context windows are limited (and performance declines the more you put in it), so they too will use some tools to skim and pick out the important parts, but I think that's a temporary thing. The huge amount of LLM prose will end up being consumed by other LLMs. I don't know enough about the subject whether that's a good or a bad thing though, right now I think it just adds to the noise until it becomes noise in, noise out.
But a lot (generalizing here) don't like giving up access "in case they need it". I haven't worked backend in ages, but years ago there was one developer that went to the ops guys and said "can I just ssh to production I need to check some env vars to debug my software" (or something to that degree). Ops team was good and it was a hard no - "just add some logging, you can deploy a new release quickly enough".
What's the market demand? I'm confident there are plenty of alternatives being churned out today but nobody's looking or asking for any. If only because they settled on k8s, they have it on their CV, they have certifications, and switching is a huge investment and risk.
Right now to me it feels like the innovation is in using LLMs to (finally?) clean up existing code, find vulnerabilities, do maintenance, optimize, and if necessary rewrite.
I can't afford a pay cut, and AI isn't making my job worth more.