3 ms·
Funny. Although there's no way we would accept this world. If it's just some trivial vibe coded app with 10 users noone will care. Once it's big and has a sig
by MattPalmer1086 1y ago
Funny. Although there's no way we would accept this world. If it's just some trivial vibe coded app with 10 users noone will care.
Once it's big and has a significant user base processing personal or sensitive data, watch out for the lawsuits and increased regulation.
- MattPalmer1086 1y agoI will add this though. I once worked on the UK government Trusted Software Initiative. We concluded that small companies just don't have the resource to secure things well. The only way we could move the needle at all was by better security training and awareness in the short term. But the fundamental economic point remains the same, and certainly magnified by vibe coding. On the flip side, we can start using AI to find security problems too.
- jrm4 1y agoI'm sorry, given that nothing reasonably close to this has happened already even though it should have, what makes you think it will now?
- MattPalmer1086 1y agoNot sure what you're getting at. We already have a bunch of laws and regulations. And misreporting your cybersecurity is already securities fraud! https://www.sec.gov/newsroom/press-releases/2023-227 https://www.sec.gov/newsroom/press-releases/2023-227
- jrm4 1y agoI'm not aware of "a bunch." But to the extent that we do, they are toothless. In the space of relatively large/noticeable companies, there has not been any remotely significantly deterring punishment handed out to those who got cybersecurity wrong. E.g. - Microsoft should be BILLIONS down; Crowdstrike should quite literally no longer exist if the punishments were remotely close to the "crime."