Jack 🤔 Herrington

You might have a functional website, but that doesn't mean it works. Today I learned about a unique California alert system and went to the CHP website to discover more about it. Only I didn't Instead I got a big old no response in my browser. Confused I double checked the availability of the website and quickly confirmed that there was something there that triggered my DNS level ad filtering. This isn't surprising as I maintain a lot of rules and prefer more blocking to less, but I was certain this had to be a mistake likely triggered by a bad filter. Turns out I was wrong, the filter was in fact working correctly, only the CHP seems to have chosen a specific hoster that has a reputation for being a source of trackers. Feel how you will about their choice of hoster, but there's an interesting problem here. What's the right way to solve picking a bad host? While lifting and migrating to a new hoster is definitely an option, what's the likelihood it will happen? Until then the CHP website is down for anyone who uses the Peter Lowe adlist and if they are non technical there's essentially no solution for them. Problems like this aren't going to go away and everyone should be taking notice. California is in a very good spot and they should be taking note. Ironically California has already made some AMAZING plays that lay the ground work for this. Californians stop screaming, this might be one of the only compliments ever given to your state government. In 2023 California announced their intention to partner with a generic medicine manufacturer to produce insulin for 10 years. 3 years later they were shipping insulin to the market with copays 1/10th of the federally maintained copay. The program has been a resounding success. How can I say this so surely? I'm a type 1 diabetic and the production of Californian insulin has created one of the only markets in the USA where a Type 1 can actually have a hope at the pharmacy. California is also the only state in the Union now that has a chance of negotiating with ANY insulin producer (it's not easy to negotiate when playing hardball kills the people you are fighting for). The model from 2023 should be at play in states like California (or Washington), or any state looking to gain an economic advantage into the future. States need to build their own cloud competitor.

How GSD turns Claude into a self-steering developer The speed at which ClawdBot MoltBot OpenClaw climbed in popularity was quite phenomenal, and for good reason: It has an audience beyond the developer space, especially those who just want to experiment with digital assistance. Todays post continues my journey with GSD, but the LLM agent landscape is changing rapidly and this shooting star caught everyone’s eye. At its core, OpenClaw is a locally hosted, open-source AI assistant that runs on your computer or server. You talk to it through apps you probably already use, like WhatsApp, Telegram, Discord, Slack, Signal, or even iMessage. And it really “does stuff” — sometimes too well. It is a gateway service that maintains WebSocket connections and includes a smart orchestration layer for working with LLM agents. Stay connected for industry’s latest content – Follow Deepthi Talasila #DevSecOps #ApplicationSecurity #AgenticAI #CloudSecurity #CyberSecurity #AIinSecurity #SecureDevOps #AppSec #AIandSecurity #CloudComputing #SecurityEngineering #ZeroTrust #MLSecurity #AICompliance #SecurityAutomation #SecureCoding #linkedin #InfoSec #SecurityByDesign #AIThreatDetection #CloudNativeSecurity #ShiftLeftSecurity #SecureAI #AIinDevSecOps #SecurityOps #CyberResilience #DataSecurity #SecurityInnovation #SecurityArchitecture #TrustworthyAI #AIinCloudSecurity #NextGenSecurity https://lnkd.in/g8YPff7n

1

I saw some dunks on this product release on twitter, but I think they're wrong - this is a good product. I wouldn't be surprised if this turns into a marketplace with website owners on one side, developers (well, AI companies and AI agents) on the other side, and Cloudflare right in the middle. What I'm imagining is that websites sat behind Cloudflare could turn off scraping with the flip of a switch and selectively allow companies to crawl them for a fee. Cloudflare can decide which sides of the transaction to take a piece of (the crawling? the marketplace relationship?). The compute and storage for Cloudflare are all incremental. https://lnkd.in/geQMX3eW

2

1 Comment

The "scout rule" is more important than ever. With coding agents, the cost is often loading context about some area of the codebase into your RAM. So if you're doing some focused work in a particular part of the codebase, kick off a couple agents for some improvements there instead of wasting that context! In fact, the concept of "backlog grooming" has been inverted for me. Critical bugs still have to get fixed, but pulling 6 low/medium-pri bugs to the top of the backlog since they may be related to an engineer's current work seems far more leveraged (when the marginal cost is ~zero) than carefully grooming 2 high-pri bugs that will require expensive context switches. Honestly, tooling to find bugs that may be related to your current work would be pretty great, but that's a post for another day. https://lnkd.in/gU9zpvRp

10

We don’t talk enough about this kind of leadership. Last week, forgecode shipped a feature that degraded response quality. Instead of hiding it, they: - Admitted the mistake publicly - Explained what went wrong - Fixed it promptly In the AI space, it’s easy to chase growth at all costs. But accountability is what builds real trust. The companies that own their mistakes and put customers first? They’re the ones that will win long-term. We need more of this energy in tech.

24

It feels so weird that just a few years ago I was in debates about whether or not to start adopting typescript, and now I’m in debates about how much permission we should give to our autonomous code robots. Life does come at you fast.

13

2 Comments

See also: “but what happens when you have code running in production that wasn’t actually written by anybody at the company?” (Attrition and widespread use of open source have been a thing forever)

18

I think vibe coding is going to create a big problem in the next 1-2 years after spending a significant amount of time coding with Agent's help. 1. It's very hard to build "elegant, working and testable solution" via vibe coding. Even with "unit tests", the agent will write unnecessarily long and hard to maintain codes. 2. Agents cannot "anticipate" what might go wrong in your solution => this is a crucial skill for any TL in software engineering. 3. New team members will be hard to grow and learn via vide coding, you will find that your team slows down in terms of outcome despite more and more lines of codes being shipped. #vibecoding #AI #machinelearning #careers

60

9 Comments

Think of CIEM integrations like a universal translator for your cloud: because AWS, Azure, and GCP definitely aren't speaking the same language when it comes to permissions. 🌍🗣️ #CloudSecurity #IdentityAccessManagement #CIEM #ZeroTrust #CyberSecurity #MultiCloud #DevSecOps

1