[sdellis]

"Reasons given include pressure to deploy quickly, vulnerabilities being too difficult to fix, and reliance on other controls to pick up the pieces."

Are they not warning their bosses? I find this reasoning hard to believe. If management doesn't care, the problem has little to do with AI. A more reasonable explanation is that they hate that they are forced to use AI and they ship Swiss cheese as and act of sabotage, apathy, or to prove AI's incompetence at taking over their job.

[saghm]

AI isn't the source of the problem (as you point out, bad management is a preexisting problem), but it exacerbates it significantly. I think it's still worthwhile to call out a new factor that's making an existing problem much worse.

[mcphage]

> Are they not warning their bosses?

Where do you think the pushing is coming from?

[spwa4]

> Are they not warning their bosses?

This has the same answer as the question why Israel doesn't just make peace with Iran. It takes 2 to tango. Bosses don't care about security holes.

[sdellis]

I think that's my issue with the headline. Placing the incompetence of bosses on devs deflects the blame.

But if we are talking about blame, we can't rule out the sabotage element. I'm a developer and luckily I have not been forced to use AI. But in my nearly 30-year career, I have never seen such resentment towards the forced use of a technology.