Comment on: Agentic AI systems violate the implicit assumptions of database design
Giving LLM agents direct, autonomous access to a real production databases with write access seems insane to me.NO ONE, agent or human, should have direct write access to production databases outside of emergency break glass scenarios. This is why we have stored routines and API layers to pre-define what writes are allowed. The facts that agents CAN autonomously write to a database does not imply that they should.For the point about query optimization, again your agents should not be issuing random queries against a production database. We have had the concept of separate analytics databases w
Comment on: AI coding agents accidentally introduced vulnerable dependencies
Nobody in their right mind builds a pipeline where security relies on a custom container runtime catching things after the fact. Security starts in CI at the image build stage. If your flow actually lets a vulnerable Next.js build slip all the way through to deployment in Containarium, your integration process is fundamentally broken, not your runtime environment
Comment on: Bots flooded my anti-bot startup with 55,000 fake signups
I feel like root cause #2 should be titled "Our API is poorly designed".If you pass nothing into the API, it doesn't give you an error? Is this even a valid use case - why is it even possible to express this request, should the important inputs not be some kind of required parameter?If your attempt to use the primary purpose of your API silently broke until your database filled up, that should probably be a big red flag about how likely customers are to make mistakes using your product.
Comment on: TIME Is Serving AI Bots a Different Website, with Ads Built In
I often get a "verify you are not a bot" these days, which just needlessly wastes my time (because I need to click on something, and this in turn takes away seconds; multiply this like x50 per day and that's a time waster, now I need an extension to disable this crap check). So I am biased here.Most people will say "yay, it is great you waste the time of AI bots via ads!". Well, I already think ads should not exist in the first place, nor bots, but both exist - but the real issue is when websites now steal my time. That was different in the 1990s. I think mankind made several missteps here.