Deezer says 44% of songs uploaded daily are AI-generated. I ran the same exercise on my commits from the last month. The number I found made me feel exactly the same discomfort.
I approved three PRs with hardcoded keys. The same models that helped write them could have caught them. N-Day-Bench measures exactly that gap — and the numbers bother me more than I expected.
Three AI-generated PRs. Three AWS API keys sitting in the code. Three times I approved them because the tests passed. The security problem with vibe-coding isn't the model — it's how your attention shifts when you're reviewing code a human didn't write.
YC S25, agents that read issues and open PRs on their own. Sounds like the future. But I've spent months working with coding agents and the real problem isn't whether the PR compiles — it's who understands that code when you have to own it at 11pm before a deploy.
There's a tool that lets you paste a GitHub URL and ask anything about the code. I used it on my own project. What it showed me about myself wasn't exactly comfortable.
32 years in the dev trenches. Here I write what I learned, what I broke, and what nobody tells you in the tutorials.
No spam. Unsubscribe anytime.