I wonder if the flood of vibecoding startups may end up helping long established enterprises and OSS through eroding consumer trust towards new software, and highlighting the value of the industrial software development process. Bills of materials, 4-eyes code reviews, release gates, QA testers, planning involving domain experts, external audits etc. Any time I see a new large piece of software nowadays that seems to have popped out of nowhere and has generic sounding docs and testimonials with em dashes I tend to wonder if it was generated with a one shot prompt and may include vulnerabilities, malicious code, or business domain hallucinations.
It's a bit like with books: 10+ years ago I could have trusted a book from a new author I never heard about just because the large effort of getting published was hinting that the author is likely qualified. Now, hell no.
When the barrier to publish drops to zero, the barrier to gain trust skyrockets.
The real question is whether these security practices can truly survive the onslaught of 24/7 attack swarms, or if we're going to have to rebuild the entire cloud from the ground up.
https://www.tomshardware.com/tech-industry/artificial-intell...
[flagged]
How are you so sure that big corporations will also keep doing code reviews, QA testing, planning. At the current moment, they are laying off a large portion of their workforce, forcing devs to take more and more ownership and even expecting devs to assume the QA testing role. I dont think any software is trustable anymore.