John Patterson

John Patterson

@jasper07.secondphase.com.au

"Such is life" https://secondphase.com.au

479 followers189 following1.6K posts

Last week, two critical PHP vulnerabilities were found. The interesting thing is how many companies didn't even know they were running PHP, buried in dependencies of dependencies. Think WordPress and other CMS platforms and tools.

As AI gets better at finding these hidden vulnerabilities, companies will need to get better at knowing whether they're affected. I expect more pressure on vendors to provide SBOMs and SaaSBOMs, so customers can quickly trace vulnerabilities through dependencies they might not even know they have.

I'm a big fan of Will Larson's writing and enjoyed this episode. It's a good reflection on how the industry has changed in recent years, and it's a dangerous time to be a middle manager who's lost touch with the technology and focuses more on bureaucracy.

Gergely Orosz@gergely.pragmaticengineer.com

What’s changed in “the unwritten rules” of engineering management since the 2010s, why are hands-on managers “back”, and what has it done to the engineer-to-CTO career path? Will Larson is one of the best people I know to answer these questions: • YouTube: youtu.be/Prl858_AovM (cont'd)

If SAP Connect is a precursor to SAP TechEd, I'd expect a more polished show than in previous years, even more than Sapphire. Not necessarily for customers, but to put tech focused investors at ease. The Autonomous Enterprise is a journey. We need to get past the market's Eye of Sauron.

If AI is the carrot and stick, and SAP's new tools promise to cut migration from 3 years to 6 months, I still wonder where the business value is. Take-up is low, and clean core done properly is even lower. So what will AI speed up? A technical migration is faster horses.

Sam's perspective on AI was quite refreshing, especially the macro Vs micro economics and how you need to hedge bets, spec driven development and the need to balance functional, non functional and business operations requirements, plus the discussion on cognitive surrender leading to cognitive debt

Gergely Orosz@gergely.pragmaticengineer.com

When does it still make sense to use microservices; and what are mental models to keep in mind when building resilient distributed systems? With Sam Newman, author of Building Microservices, and the fresh release Building Resilient Distributed Systems: YouTube: youtu.be/a0sZV0qIbI0 (cont'd)

The anxiety of unfinished work used to stay at the keyboard. You walked the dog or went to the gym, and the work waited. With AI agents, the work keeps running. So instead of leaving work behind, you wake up wondering what your agents did overnight.

Been thinking about ham and eggs. AI makes context switching easier for non-developers and vibe coders. AI can build the mental model for the next task. But developers still pay the cost. Flow breaks. Unfinished work nags. We may feel like the chicken, but the developer is still the pig.

Every context switch puts real skin in the game. AI makes it cheap to fire off ideas, designs, plans, prompts and code But someone still has to absorb the context, work through the consequences and own the outcome That's the difference The chicken lays the eggs. The developer is still in the bbq

A friend told me he's interviewing for an architect role. For the next interview he has 15 minutes to explain what he's learnt about the programme, how he'd improve it, and what he'd do in his first 90 days. Honestly, I like it. It tests how you think.

A lot of enterprises have principles like buy vs build, and SI-first for development outside their core domain. I wonder how AI changes these. Build more, or use AI to write the glue between what we buy? Does that push SIs toward fractional, outcome-based engagements?

"We believe that rigorous use of AI helps a company like ours accelerate development, delight customers, and go head to head with competitors with vastly more resources. We believe that using AI is not a replacement for skill and craft, but an amplification." Culture eats breakfast for strategy

Charity Majors@charity.wtf

I wrote a new piece yesterday, called "Confessions of an Unrepentant Slop Snob", about my escalating rage at AI-generated text. It includes a framework for thinking about when AI involvement is fine -- just another tool -- and when it lands as a violation. charity.wtf/p/confession...

If River Cartwright becomes the new James Bond, it would be a brilliant hat tip back to the slapstick Bond era, when Peter Sellers and Woody Allen were playing Bond. From Slow Horses to 007. 😂

John Patterson reposted

"I don't know the answer myself, but I asked a blowhard I know and he took a wild guess, here's what he said: " How I interpret pasted replies from an LLM in online conversations

Lex goes to DHH "I'm an introvert who doesn't like speaking" DHH "me too!!" Meanwhile I'm half way through their 5 hour podcast that I can't listen to at 1.5X speed cause DHH already waxes lyrical at 2X speed

At SAP #SITSyd on Friday, I was talking with other industry veterans, lamenting that 30 years later salaries and rates haven't gone up. We worked in tobacco, alcohol, building products, car manufacturing and steel. Most have disappeared, moved offshore or been made uncompetitive.

What's left is big companies fighting over big-volume, low-margin work that can't go offshore, and government. Thirty years of experience, but the industries and markets we built that experience in have largely disappeared