4 ms·

Also it really baffles me how many are actually in on the hype train. Its a lot more than the crypto bros back in the day. Good thing AI still cant reason and i

• fragmede 10mo ago
  your credentials shouldn't be in your codebase to begin with!
  • zwnow 10mo ago
    .env files are a thing in tons of codebases
    • iwontberude 10mo ago
      but thats at runtime, secrets are going to be deployed in a secure manner after the code is released
      • zwnow 10mo ago
        .env files are used to develop as well, for some things like PayPal u dont have to change the credentials, you just enable sandbox mode. If I had some LLM attached to my codebase, it would be able to read those credentials from the .env file. This has nothing to do with deployment. I never talked about deployment.
        • Carrok 10mo ago
          If you have your PayPal creds in your repository, you are doing it wrong.
          • zwnow 10mo ago
            .gitignore is a thing
            • Carrok 10mo ago
              Which every AI tool I’m aware of respects and ignores by default.
              • zwnow 10mo ago
                Why is it that they can add new env variables then?
                • Carrok 10mo ago
                  It is trivial to append to files without reading them. Also, no AI provider even wants your secrets, they are a liability. Do whatever you want though, I'm not here to convince you of anything.
    • mkozlows 10mo ago
      If your secrets are in your repo, you've probably already leaked them.
• aspenmartin 10mo ago
  I think the issue is folks talk past each other. People who find coding agents useful or enjoyable are labeled “on the hype train” and folks for which coding agents don’t work for them or their workflow are considered luddites. There are an incredible number of contradicting claims and predictions out there as well, and I believe what we see is folks projecting their reaction to some amalgamation of them onto others. I see a lot of “they” language, and a lot of viral articles about business leadership “shoving AI down our throats” and it becomes a divisive issue like American political scene with really no one having a real conversation
  • zwnow 10mo ago
    Its all a hype train though. People still believe in the AI gonna bring utopia bullshit while the current infra is being built on debt. The only reason it still exists is that all these AI companies believe in some kind of revenue outside of subscriptions. So its all about: Owning the infrastructure and enshittify (ads) once enough products are based on AI. Its the same chokehold Amazon has on its Vendors.
  • llmslave2 10mo ago
    I think the reason for the varying claims and predictions is because developers have wildly different standards for what constitutes working code. For the developers with a lower threshold, AI is like crack to them because gen ai's output is similar to what they would produce, and it really is a 10x speedup. For others, especially those who have to fix and maintain that code, it's more like a 10x slowdown. Hence why you have in the same thread, some developer who claims that Claude writes 99% of their code and another developer who finds it totally useless. And of course others who are somewhere in the middle.
    • throw1235435 10mo ago
      There's also the effect of different models. Until the most recent models, especially for concise algorithms, I felt it was still easier to sometimes do it myself (i.e. a good algo can be concise/more concise than a lossy prompt) and leave the "expansion/repetitive" boilerplate code to the LLM. At least for me the latest models do feel like a "step change" in that the problems can be bigger and/or require less supervision on each problem depending on the tradeoff you want.