"AI-powered software cloning is quite the hot topic. Software companies are likely unhappy with the notion of vibe coders ganging up to try and copy their software. Simultaneously, users tired of subscription models, price hikes, and drops in software quality are more than happy to rebel, as proven by the buzz around the Adobe-replacement ArtCraft. Now, OccupySaaS is the latest user-led revolt against the software system, aiming to create clean-room, open-source reimplementations of common services using AI tools.The initiatives already underway in the project look to replace Auth0 and Salesforce with minty fresh alternatives called ZeroAuthy and SalesCompel, respectively. Given that these services all run on their companies' servers, there are no binaries to examine and decompile — the reimplementations are done referencing available documentation, APIs, development kit behaviors, and any applicable open standards. Judging from the project website, it seemingly wants new software to acts as a API-compatible drop-in replacement where applicable.The project puts a sharp pin on its development ethics and requirements: all work must be a fully clean-room reimplementation, with no decompiled code, no confidential information (including source code) taken from any previous employers, and no copying of UI assets or any other trademarks.Creating software in this manner is both easier and harder than usual. On the one hand, the only thing that matters is that whichever user inputs are processed and produce the same outputs as the original software, and those behaviors are largely defined by the aforementioned specifications."tomshardware.com/software/appl#AI #GenerativeAI #OcupySaaS #SaaS #Programming #SoftwareDevelopment #LLMs #Salesforce #Auth0

“The PHP panic has not turned to patching: And that’s bad news, capital B, as PHP2Shell attacks ramp up.We know the paired PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, aka PHP2Shell, have a Common Vulnerability Scoring System (CVSS) score of 9.2, which is scary bad. After all, about 70% of websites with an identifiable server-side language run on PHP-based systems like WordPress.But does that mean people are patching their servers as fast as they can?To quote Moshe Siman Tov Bustan of Ox security: “The panic hasn’t turned into patching.” Ox reports in a new blog post that of October 26, five days after disclosure, the picture has barely shifted – 93.6% still exposed.“”thenewstack.io/php2shell-unpat#CyberSecurity #PHP #PHP2Shell #Programming #SoftwareDevelopment

Utterly stupid. It's almost as they don't believe that the technology isn't good enough for their workers to adopt it... "Proton, the company behind ProtonMail and other privacy-focused products, told staff on Monday it would be ‘re-interviewing’ staff across the company about how they use AI in their jobs, with the implication that the interviews may decide whether staffers have “continued employment,” according to an internal Proton email obtained by 404 Media.“These re-interviews are consequential,” a part of the email reads. “Interviewers will document their assessments, which will inform the broader review of our organization and talent. That review may lead to changes in roles, responsibilities, and continued employment. Individual outcomes will be communicated directly once decisions are finalized.”Proton’s CEO Andy Yen has steadily pushed the company towards more AI use, including launching AI centered products like Lumo, a privacy-focused chatbot. The leaked email says Yen “interviewed more than 40 senior leaders across Engineering and Product to begin this process.” Now, those interviews are extending across the company."404media.co/proton-to-re-inter#AI #GenerativeAI #Proton #LLMs #SoftwareDevelopment #Programming

"Two critical flaws hidden for years in PHP, a technology that powers much of the web, have sparked a global cybersecurity scramble. Governments, hospitals and businesses rushed to patch vulnerable systems after researchers uncovered weaknesses that could allow attackers to gain access to servers and databases. Tarah Wheeler, an information security executive, AI researcher and chief security officer at TPO Group, joins DW News to explain why the discovery is causing alarm, whether hackers are already trying to exploit the flaws, and what it tells us about AI's growing role in cybersecurity."youtube.com/watch?v=3EB16ZFkRhw#CyberSecurity #PHP #PHP2Shell #AI #GenerativeAI #LLMs #Programming #SoftwareDevelopment

"Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere.PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.”The maintainers published the advisory following the leaking of purported details, which have yet to be confirmed. The report showed a video of an exploit tool dubbed PHP2Shell executing code on webservers running:"arstechnica.com/security/2026/#CyberSecurity #PHP #PHP2Shell #Programming #WebDevelopment #SoftwareDevelopment

I do this everyday for technical writing (and it absolutely works!)"Adversarial Code Review is a verification pattern where a distinct AI session—the Critic Agent—reviews code produced by the Builder Agent against the Spec before human review.This extends the Critic (Hostile Agent) pattern from the design phase into the implementation phase, creating a verification checkpoint that breaks the “echo chamber” where a model validates its own output.The Builder Agent (optimized for speed and syntax) generates code. The Critic Agent (optimized for reasoning and logic) attempts to reject it based on spec violations."asdlc.io/patterns/adversarial-#AI #GenerativeAI #LLMs #Programming #SoftwareDevelopment #CodeReview

ANTI-AI HUMAN SLOP = ANTI-FREEDOM SLOPPeople loose all respect from me when they repeat this same old anti-AI human slop tropes. It's absolutely ridiculous because it's dogmatic and absolutely discriminatory. I don't think this kind of stance is within my definition of freedom. People who assume this position are enemies of freedom. Period. I tell you: Within a few years, people will come back and realize that they made a terrible mistake by judging others not by quality of their work but by the tools they use. Yet, for me, currently this is infuriating. "I suggest the social action: shame. Shame these people. Their actions are shameful. AI bros hate being shamed and they try to make rules against shaming — because shame works.None of these people doing shameful things deserve a place in polite company. They should be shamed for their shameful choices.The AI industry is also running a PR push to redefine common word usage. The word “slop” is also super effective — so the bros really hate “slop” and try to define it to mean slop they don’t like."pivot-to-ai.com/2026/10/14/lin#AI #GenerativeAI #LLMs #SoftwareDevelopment #Programming #HumanSlop #AntiAISlop #Neoluddism #Linux #OpenSource #FLOSS

This post is so full of simplications and manicheisms that it leaves out almost all nuanced situations and complex uses of LLMs suited to different scenarios... In sum, just another example of anti-AI human slop... :-/ This is just one of the few things that I don't really like with Mastodon. There seems to be too much anti-AI human slop.Surely by now we should all be very well aware of the limitations of LLMs and how these can be easily solved if we're not lazy to accomplish something of way higher quality in a much faster way than it otherwise would be possible. Alas, that seems not to be the case because there seems to be always someone that is against the right to use whichever tools we want to use if the quality of the final output is not affected. i guess the idea of freedom must be a bit strange to them... "Instead of letting the world choose for you, I believe that each open source project is now facing a strong choice that has to be made urgently. Accept AI-generated contributions or not.This is not easy.Both choices will alienate some part of the community and some key contributors. That’s sad, but a project cannot please everyone.Now, contributors may argue whether pro-vibecode or anti-slop is better from a philosophical, ethical or pragmatic point of view. Nobody can decide what is best for a project but its key community members."ploum.net/2026-10-01-pascal_wa#AI #GenerativeAI #LLMs #OpenSource #FLOSS #Programming #SoftwareDevelopment

"A developer frustrated by Adobe's cancellation fees used Anthropic's Opus 5.5 model and pure Rust to rewrite the entire Creative Cloud suite as open-source alternatives. The seven applications — PhotoCraft (Photoshop), VectorCraft (Illustrator), FilmCraft (Premiere Pro), EffectCraft (After Effects), LightCraft (Lightroom), DesignCraft (InDesign), and PdfCraft (Acrobat) — were built from scratch using clean-room reverse engineering without touching Adobe's original code. Within the first week, the GitHub repository garnered 24K stars.The apps run natively on macOS, Windows, and Linux, with some capable of running in browsers via WebAssembly. Shortly after, the same team (ArtCraft) released three Microsoft Office clones: GridCraft (Excel), WordCraft (Word), and DeckCraft (PowerPoint). All three replicate the familiar UI structures — cell layouts, document editing, slide masters, animations — and are completely free, open-source, subscription-free, and written in Rust."besthub.dev/articles/ai-genera#AI #GenerativeAI #LLMs #OpenSource #ArtCraft #Adobe #Opus #SoftwareDevelopment #Programming #VibeCoding

Umm. I think the researchers focused on the wrong thing. For AI productivity benefits to really work when it comes to software development, It's another LLM who should be review most of the code generated by an LLM, while a human should just act mostly as a judge, moderator, and final arbitrer. "In terms of raw code being produced, the results are clear and stark. The introduction of AI coding agents at a firm leads to a 30 percent increase in total lines of code generated, a 20 percent rise in the number of total commits, and a 23 percent increase in pull requests on average, the researchers write. But all that extra code doesn’t translate directly into improved software output on the firm level. On the contrary, the resolution rate for Issues and Epics (i.e. wholesale software features) tracked by tools like Jira did not change in a statistically significant way after AI tools were introduced (the researchers also found no “compositional shift” in the size or complexity of those Jira-tracked issues across the AI introduction).The reason for that discrepancy can be found directly in the code review process, which takes markedly longer on average after the introduction of AI coding agents. Overall, the average “review process” time between a pull request getting submitted and it being merged into the codebase balloons 49 percent on average after AI agents are introduced. That effect can be seen in more granular data, too, with “the share of pull requests with changes requested nearly doubl[ing], and the number of comments per pull request increas[ing] by 35%” following the AI agent shift, the researchers write.In response to this change, the researchers found a 14 percent increase in the share of workers performing code reviews after AI agents’ introduction. They also write that they “cannot attribute significant employment changes to AI...”"arstechnica.com/ai/2026/10/ai-#SoftwareDevelopment #Programming #AI #GenerativeAI #LLMs #AIAgents #Automation #Productivity

"All environmentalists in the global North have operated from the same strategic assumption: the more the climate crisis hits us, the more climate rational we’ll become. But the last few years have falsified that hypothesis. In fact, the more the climate catastrophe escalates, the less we want to look at it. Shit has gotten worse. But shit getting worse in a way that reminds us of all the changes we should have made over the last 30 years doesn’t make us more rational, it makes us more ashamed. The more we’re reminded of our decades of inaction and centuries of exploitation, the more we’re going to turn away.(...)I used to work as an energy policy expert, and one thing that’s obvious when you look at the history of energy is that there has never been an energy transition. There have only ever been energy additions. Fun fact: at the height of the coal age, we burnt more biomass than ever before. At the height of the oil age, we burnt more coal than ever before. And at the height of the gas age, we’re burning more oil than ever before.So all these people saying that adding renewable energy will mean fewer fossil fuels being burnt, that’s simply not true. In a world where the hunger for energy rises faster than energy production, renewables simply add more energy to the system. And if you imagine a green capitalist round of growth kicking off, you’d have to reconfigure the entire system, requiring enormous productive effort, all run from a fossil-fuel energy system. So basically, more renewables does not mean less fossils, it just means more energy in the mix."counterpunch.org/2026/09/25/ho#ClimateChange #GlobalWarming #Collapse #ClimateCollapse #FossilFuels #Renewables #SocialActivism #Degrowth

“There is a pessimistic version of this where AI replaces the teacher because the model can generate endless explanations and code. I do not buy that version, because the parts of technical education I value most were never the typing. They were the decisions behind the typing.A good educator has already made the mistake I am about to make. They have already tried the abstraction that looked clean and became annoying six months later, figured out which framework convention is worth following and which one stops helping in this particular case, and seen which production failure should change the design instead of becoming one more rescue block.The job starts looking less like “record every keystroke” and more like encoding judgment well enough that both the developer and the coding agent can use it.“But I still read tutorials”So do I. I still read articles to understand concepts, look up APIs, and buy books from people whose thinking I want more of.What I am much less willing to do is spend hours manually reproducing an implementation in a disposable sample app before I can apply the idea to my own code.That is what I mean by dead here: the tutorial is not gone, but it is not the whole workflow anymore.”robrace.dev/blog/programming-t#TechnicalWriting #TechnicalCommunication #AI #AIAgents #AgenticAI #Programming #LLMs #SoftwareDevelopment #SoftwareDocumentation