What I got from the article is that this company had minimal access controls and a very reactive security approach. Those employees should not have been able to download or execute random software or “assignments”. As we saw, even if they caught the first download after the fact and replaced the laptop, the damage was already done. This is again my problem with everyone adopting the “move fast and break things” mentality. Security starts to be seen as a hindrance that just slows developers down.
To me it just reads like multiple supply chain attacks on the client tooling side. It just happened to be developer tools that integrated with ML models. Where’s the vibe coding part?
What I got from the article is that this company had minimal access controls and a very reactive security approach. Those employees should not have been able to download or execute random software or “assignments”. As we saw, even if they caught the first download after the fact and replaced the laptop, the damage was already done. This is again my problem with everyone adopting the “move fast and break things” mentality. Security starts to be seen as a hindrance that just slows developers down.
To me it just reads like multiple supply chain attacks on the client tooling side. It just happened to be developer tools that integrated with ML models. Where’s the vibe coding part?
Yeah, that fits with the whole vibe coding concept where they don’t need to know what they are doing to vomit forth code.
Fortunately now with Super Intelligence, we can say “Grok, move fast and don’t break things” while shipping more and more, faster than ever.
Security isn’t that much of an issue if you just write an app for rating co-eds’ faces.