Posted by jpluimers on 2026/10/27
During a private conversation, someone mentioned that there is a storm of CVEs and someone else asked if this was because people have been sloppy in programming for a very long time.
Luckily [Wayback/Archive] CVE: Common Vulnerabilities and Exposures has a table of Published CVE Records with totals which I have copied:
Posted in Agile, Code Quality, Database Development, Development, JavaScript/ECMAScript, jq, JSON, PostgreSQL, Power User, Scripting, Security, Software Development | Leave a Comment »
Posted by jpluimers on 2026/09/30
Recently someone commited a large set of LLM (Large Language Model often wrongly called AI or Artificial Intelligence as at best they are an AI model, or better phrased machine learning model, not even a machine learning reality¹) assistance files to the pixelfed repository. This caused quite some turmoil resulting in pixelfed banning AI generated contributions.
This is for good reason: too many LLM generated commits lack quality control. This results in shoving the burden of the checks from the contributor to the volunteers of the project teams. Those volunteers are already overwhelmed anyway (there is always an applicable XKCD, in this case [Wayback/Archive] 2347: Dependency – explain xkcd).
The offending commit was [Wayback/Archive] Add AI docs · pixelfed/pixelfed@65dff00 · GitHub. The contributor was lazy enough to wrongly name this commit, as these weren’t docs in the sense of documentation, but a set of Claude Skills and other LLM slop².
That behaviour is exemplary for almost all LLM contributions: most humans and systems generating them take them for correct and just commit their content.
I am still not convinced that the main contributor switching within a few days from “oh, let’s add LLM stuff” into “nope, we are not going to allow LLM” vows for a strong soul.
The Pixelfed statement is via [Wayback/Archive] pixelfed: “Pixelfed bans AI generated contributions…” – Mastodon
Posted in Agile, AI and ML; Artificial Intelligence & Machine Learning, Claude, Code Quality, Development, Generative AI, JavaScript/ECMAScript, LLM, PHP, Quality Assurance, Scripting, Software Development, Vue.js | Leave a Comment »
Posted by jpluimers on 2026/09/29
Interesting question with (too few but) nice comments: [Wayback/Archive] Tom Schuster: “To my security peeps: Was the …” – Hachyderm.io
- To my security peeps: Was the introduction of widespread fuzzing similar to AI-based bug hunting now, or is this really a different beast?
- @evilpie IMHO it’s very similar, definitely larger scale though
- @buherator @evilpie agree that it is similar, it feels like the larger scale is mainly because the security industry grew and many people experiment with LLMs. Prompting seems more intuitive than writing a harness for AFL, so it’s probably more how humans approach than the tool. It’s just another tool.
- Signal to noise ratio is worse with LLMs but but but but but
- @floyd @evilpie I tried to avoid elaborating on “scale” because it refers to many things in this case, e.g.:- How easily you can adapt to a new target (vs. AFL)
– How much power is available for the task (GPU acceleration)
– Number of bug classes you can (trivially) aim for (vs. fuzzing for logic bugs)
– etc.
--jeroen
Posted in Agile, Code Quality, Development, Quality Assurance, Software Development | Leave a Comment »
Posted by jpluimers on 2026/09/01
A topic that will stay revant during all of our software building life: [Wayback/Archive] Kevlin Henney on Code Refactoring – Semaphore
Via: [Wayback/Archive] Darko Fabijan on Twitter: “I had a great time discussing with @KevlinHenney about the value of code refactoring, managing technical debt, and balancing workload. Listen to our conversation: …”
It is part of a podcast series, but the site has no RSS feed.
I found it listed at least on [Wayback/Archive] Kevlin Henney On Code Refactoring Semaphore Uncut podcast which points to the mp3 at [Wayback] 13007535-kevlin-henney-on-code-refactoring.mp3, the series at [Wayback/Archive] Semaphore Uncut podcast and [Wayback/Archive] Semaphore Uncut RSS Feed.
–jeroen
Posted in Conference Topics, Conferences, Development, Event, Refactoring, Software Development | Leave a Comment »
Posted by jpluimers on 2026/07/07
I will likely need this one day: [Wayback/Archive] microsoft/pyright: Static Type Checker for Python
Via:
github.com/microsoft/pyright (I assume you can’t make pyright-for-JS because Typescript is a different language)”--jeroen
Posted in Agile, Code Quality, Development, Python, Scripting, Software Development | Leave a Comment »
Posted by jpluimers on 2026/05/26
Some of the video URLs of #kotlinconf23 most via [Wayback/Archive] KotlinConf’23 – YouTube:
Posted in ChatGPT, Code Quality, Conference Topics, Conferences, Development, Event, Java Platform, Kotlin, Pingback, Software Development, Stackoverflow, Technical Debt, Testing | Leave a Comment »
Posted by jpluimers on 2026/04/23
Over the last few years I have seen more and more posts where people are fed up by Agile.
The whole fundament if Agile, or better any lightweight methodology, is to be able to flow as a team. That is only possible when the flow is not disturbed by a truckload of rules or schedules overloaded with ceremonies.
The best way to implement over the last 40+ years I have been in IT is to use common sense.
This basically has not changed since before “I think, therefore I am” (Cogito, ergo sum), so please read this other quote from René Descartes‘s same book “Discourse on Method” where* he begins by allowing himself some wit:
Good sense is, of all things among men, the most equally distributed; for every one thinks himself so abundantly provided with it, that those even who are the most difficult to satisfy in everything else, do not usually desire a larger measure of this quality than they already possess.
Or in other words*:
Everyone has a similar and sufficient amount of common sense, but it is rarely used well.
For me, lightweight methodologies vary by team and project and always involve both critical thinking and together with other team members regularly thinking about:
Agile Software Development is that simple.
Oh: always think about why Software Development or any other work you are involved in differs much or little from Lean Management in car manufacturing (the place where many people advocate the Agile methodologies in Software Development are supposed to stem from: strongly disagree with that as they have their own origin. Try to think about why I disagree, even if your opinion differs from mine).
Posted in Agile, Development, Software Development | Leave a Comment »
Posted by jpluimers on 2026/03/31
As always, Kevlin Henney has interesting talks. This one too: [Wayback/Archive] Kevlin Henney – Refactoring Is Not Just Clickbait #buildstuffconf – YouTube
Via [Wayback/Archive] Gil Zilberfeld (TestinGil) on Twitter: “.@KevlinHenney – Refactoring Is Not Just Clickbait #buildstuffconf”
–jeroen
Posted in Agile, Development, Refactoring, Software Development | Leave a Comment »
Posted by jpluimers on 2026/02/19
Missed Schedule 2020/02/19 at 6:00 pm
Yesterday evening, WordPress.com did it again: “missed schedule” – that bug still is not fixed, so I posted it manually today.
In the time when people create a lot of technical debt, the [Wayback/Archive] Manifesto for Agile Software Development turned 25 years. Happy birthmonth!
Birthmonty you say, not birthday? Yes, it took a few days for the Agile Manifesto to get written – you can read about it at [Wayback/Archive] History: The Agile Manifesto which starts with
On February 11-13, 2001, at The Lodge at Snowbird ski resort in the Wasatch mountains of Utah, seventeen people met to talk, ski, relax, and try to find common ground—and of course, to eat. What emerged was the Agile ‘Software Development’ Manifesto. Representatives from Extreme Programming, SCRUM, DSDM, Adaptive Software Development, Crystal, Feature-Driven Development, Pragmatic Programming, and others sympathetic to the need for an alternative to documentation driven, heavyweight software development processes convened
I got reminded to it [Wayback/Archive] Agile Manifesto co-author ‘smitten’ with vibe coding • The Register which shows that vibe coding only can work when all people involved know exactly what they are doing. More often than not they don’t, and just increase their technical debt which was something that working in an agile way tries to solve. So better re-read this 25 year piece of work before you start using LLM to generate code.
Related blog posts:
Posted in Agile, Development, Extreme Programming (X), Missed Schedule, Power User, Software Development, WordPress | Leave a Comment »
Posted by jpluimers on 2025/10/28
[Wayback/Archive] Refactoring Is Not Just Clickbait – Kevlin Henney – NDC Oslo 2022 – YouTube
Via:
–jeroen
Posted in Agile, Code Quality, Conference Topics, Conferences, Development, Event, Refactoring, Software Development, Technical Debt | Leave a Comment »