
Competitive Edge in the Age of AI
I had to fix a batch of vulnerabilities in one of our applications at work the other day. I thought to myself, "I'll get AI to do this for me". I knew what needed to be done, dependency upgrades that could potentially break the build. It felt like the perfect task for AI: Upgrade the dependencies. Fix the build. Save me the time. I prompted the AI tool, I observed it's reasoning process, really impressive and methodical. When it finished, I noticed over 20 files had been modified, with additional 6-8 dependencies added to the POM file. Technically, my vulnerabilities were resolved. However, from experience, I knew there was some sort of overengineering going on. What AI had done was to patch each vulnerable dependency individually. The symptoms had been treated. I knew upgrading the actual parent dependency would transitively resolve most of the vulnerabilities in one clean move, thereby treating the root cause. So I discarded all of AIs changes, and upgraded my parent dependency. A fe
Continue reading on Dev.to
Opens in a new tab



