Lack of accountability and security in software development processes leading to inefficiencies and potential risks

Signals over time

2 observed signals across 1 sources, tracked for 3 days. Confidence: low.

What people are saying Observed

• “It has been happening for my entire 30+ year career. This is not a new trend. LLMs are the newest flavor of it, but low-code/no-code tools have been around for decades. As well as clever people who just figure out how to create apps. They have a really standard lifecycle: They get built. They work for a small department. If it stops there, it just keeps running until the person who built it moves on, then it gets trashed and replaced with something else. Or, if it grows beyond the department, that person's life starts to get taken up in maintaining it, it fails to scale, and IT takes it over (or replaces it). The question is not does it happen. It happens so often that there is even a term for it: "Shadow IT". The question is not even whether or not you can launch a product to stabilize the lifecycle. The real question is - should you? The ability to create an app doesn't grant the knowledge of how to make it secure and fit within regulatory bounds for your industry. It is quite possible (and happens often) for someone to make an app for their department that works great and everyone loves, but exposes the company to real regulatory and legal risks. That is”

  Hacker News · frustration

• “Because that's not the point. Before you could waste, without kidding, hours in meetings discussing css alignments, flows that didn't make sense but the upper levels were pretty serious about it - "Our QA and test groups say this is of the utmost importance", even when the QA and test groups were the same, 3 or 4 people that insisted on it. I think most people, but at least I, could always deliver things inside schedules (not even set by myself) without a problem, even with those "adjustments" and changes of mind, and doubly so if I could just have the same leeway that now seems to be in place. Nonetheless, if there's going to be a premium it has to be discernible in any particular way because software for business is always considered a cost. But what really shows this industry is half a joke, is that now there's no issue in giving 3rd party agents full access to inner code and logic, many times credentials too because these systems are being deployed in CIs. And because there's really no enforcement or punishment for leaks, or endangering users in most areas there's no reason for a premium. There's people pushing thousands of”

  Hacker News · frustration