惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

F
Fortinet All Blogs
宝玉的分享
宝玉的分享
酷 壳 – CoolShell
酷 壳 – CoolShell
T
The Exploit Database - CXSecurity.com
Help Net Security
Help Net Security
腾讯CDC
Project Zero
Project Zero
C
CXSECURITY Database RSS Feed - CXSecurity.com
IT之家
IT之家
C
Cyber Attacks, Cyber Crime and Cyber Security
T
Tailwind CSS Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
D
Darknet – Hacking Tools, Hacker News & Cyber Security
L
LINUX DO - 最新话题
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
T
Threatpost
N
News | PayPal Newsroom
C
Cybersecurity and Infrastructure Security Agency CISA
Hacker News - Newest:
Hacker News - Newest: "LLM"
S
SegmentFault 最新的问题
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
P
Proofpoint News Feed
A
Arctic Wolf
B
Blog RSS Feed
Forbes - Security
Forbes - Security
P
Privacy & Cybersecurity Law Blog
Attack and Defense Labs
Attack and Defense Labs
V2EX - 技术
V2EX - 技术
P
Proofpoint News Feed
I
Intezer
Application and Cybersecurity Blog
Application and Cybersecurity Blog
阮一峰的网络日志
阮一峰的网络日志
aimingoo的专栏
aimingoo的专栏
T
Tenable Blog
MyScale Blog
MyScale Blog
U
Unit 42
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
WordPress大学
WordPress大学
W
WeLiveSecurity
D
DataBreaches.Net
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
G
GRAHAM CLULEY
有赞技术团队
有赞技术团队
Martin Fowler
Martin Fowler
罗磊的独立博客
The Last Watchdog
The Last Watchdog
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
V
Vulnerabilities – Threatpost
美团技术团队
Microsoft Security Blog
Microsoft Security Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Software development in the AI era - is vibe coding our future?
Karol Burdzi · 2026-05-15 · via DEV Community

Originally posted on https://proofpocket.com/blog/software-dev-in-ai-era

When I was building the first version of Proof Pocket, I wrote every line myself. Not because I had to, but because I needed to actually understand the domain — encryption, offline storage, what it means for a user to trust an app with sensitive documents. That understanding would have been much harder to gain if I had just prompted my way through it.

I think about that a lot when I see how AI-driven development is being sold right now.

We're moving complexity, not reducing it

We're moving complexity, not reducing it

A lot of AI-driven software development feels heavily influenced by marketing. We are being pushed toward vibe coding and faster delivery. Everyone keeps saying we will be left behind if we do not adopt it now. The promise is attractive: build more, ship faster, reduce the manual work.

But AI-generated results are often inconsistent and non-deterministic. Code review has always been one of the harder parts of software development, and now we are getting even more code to review. In some cases, we are not reducing complexity. We are just moving it somewhere else.

I also think real product understanding will become a serious problem. Developers usually understand the product better when they actually build parts of it themselves. If most of the implementation is delegated to AI, it becomes easier to lose context. And without context, it is much harder to make good technical and product decisions.

Code was rarely the bottleneck

Code was rarely the bottleneck

This is subjective, but in many projects I have worked on, writing code was not always the thing that slowed us down the most.

Very often, the real blockers were decisions, unexpected pivots, unclear requirements, and changing direction in the middle of the work. Many times, I deleted my own code simply because the requirements changed.

In many teams, not enough attention is given to business analysis, diagrams, process descriptions, and proper planning before the coding starts. Decision-making is crucial and hard, and it is the part that gets skipped.

This does not apply to every case. Startups are different. When you are doing quick experiments, validating ideas, or building an MVP, speed matters a lot. But I would separate those situations from larger, more mature projects.

We need different processes, not one universal fix

We need different processes, not one universal fix

I do not think there will be one perfect process for AI-assisted development. We probably need several different ways of building products, depending on the size, risk, and maturity of the project.

It is much easier to go into "YOLO mode" for a small product or startup. But for a big company with multiple products, especially critical ones like financial or medical systems, that approach is simply not acceptable.

Even before AI, I felt that being too attached to Scrum could become a rabbit hole. Imagine a small startup product estimated for two or three months of work. Having all the usual meetings, developing every tiny task independently, and then testing each one manually can waste a lot of time.

For this kind of project, I would rather divide the product into main workflows. Instead of treating every small part of the user account area as a separate delivery, I would group the whole user account and profile flow together — from account creation to filling in and editing profile data.

This bigger workflow can still be divided into smaller subtasks for easier code review. But I would not send every tiny part to QA separately. I would rather deliver the whole workflow, let QA test it manually as one complete section, gather all bugs, report them together, and then iterate.

With this approach, you can divide the app into a few real use cases and deliver them one after another. This makes even more sense for a startup or MVP, where the product should usually do one thing well instead of trying to become a super app from the beginning.

Someone could say that QA will have a lot to check at the end. But I think it is often easier to focus on a complete section of the app, write proper test cases for it, and test the whole flow without constantly switching between unrelated tasks and meetings.

This is also how Proof Pocket was handled. The first version was just simple onboarding and document encryption. No polished UI, no backups, no peer-to-peer transfers, no categories. It was supposed to address one simple problem: I have a confidential document on my phone, I want to keep it safely encrypted, and I want easy offline access to it.

But what about bigger projects?

Core domain still needs a human

Core domain still needs a human

I think the main domain should still be handled by software developers, with AI acting as an assistant. The code should be well known and understood by the developers, especially if they are expected to participate in decision-making meetings and understand the real business behind the product.

A good analogy is Domain-Driven Design. DDD teaches us to describe the main domain and subdomains carefully. Not every part of the system has the same importance. Some parts are core to the business, while others are just supporting or generic functionality.

This is where AI can be very useful. We can use AI to generate boilerplate, implement non-critical parts, help find bugs, audit code, or build features where deep business knowledge is not required.

For example, I do not always need to know every detail of how a table or view is rendered. But I do need to know what data should be presented, why it matters, and how it affects the user or the business process.

But for the core domain, I would be very careful. If the most important part of the business logic is generated without proper understanding, the team may move fast at the beginning and pay for it later.

Maintenance vs new features

Maintenance vs new features

AI is quite good when the task is to add another module, another layer, or another isolated feature. But reality is often more complicated than that.

Many legacy projects contain hard dependencies, hidden assumptions, and years of workarounds. New bugs can easily be introduced when existing code is changed. Sometimes the code looks strange only because the historical context is missing. Without that context, AI may "fix" something that was actually protecting the system from another problem.

From my experience, letting AI maintain a large legacy codebase is a no-go. AI can be very helpful when finding the source of an issue — reading stack traces, analyzing logs, pointing out suspicious places in the code. But when it tries to fix the issue automatically, it often introduces new problems.

We can build self-healing loops, automation, extra tests, and verification pipelines. But in most cases, the effort is not worth it.

For maintenance, I prefer to use AI in assisted mode. Let it help with debugging, finding the issue, deciphering native stack traces, and pointing out possible causes. But the actual bug fix should be done carefully by a human.

For new features, especially in a project with a good modular architecture, we can give AI a bit more freedom. If the boundaries are clear and the codebase has a proper test harness, AI can be very effective while still keeping the code reasonably clean.

Testing and AI

Testing and AI
One thing I observe now is that when it becomes easy to add tons of tests with AI, people just do it.

At first, this sounds great. More tests, better coverage, fewer bugs. But in practice, many of those tests are useless AI slop that only extends the CI pipeline without giving much real confidence.

On the other hand, AI makes it much easier to add missing tests for parts of the system that we never had time to cover before. That is a real benefit.

Please do not flood your project with useless tests just because AI wants 100% coverage or because it can generate hundreds of test cases in a few seconds. Balance matters.

Tests should protect real behavior. They should document important assumptions. They should make refactoring safer. They should not exist only to satisfy a coverage number.

Where does that leave us?

Where does that leave us?

I wonder what the future of software development will look like. I genuinely do not know.

AI will definitely change the way we build software. It already has. But I do not think the future is just about replacing developers with prompts.

Developers will still need to understand the product, the business domain, the architecture, and the trade-offs. AI will help us move faster, automate boring work, and explore solutions more quickly. The gap between what you can build and what you actually understand — that is where things will go wrong.

But the responsibility for the product will still stay with humans.

At least, I hope so.