Not convinced "AI" is needed for this sort of around the clock pen testing - a well-defined set of rules that is being actively maintained as the threat landscape changes, and I am pretty sure there are a bunch of businesses that offer this already - but I think constant attacking is the only way to really improve security posture.

To quote one of my favourite lines in Neal Stephenson's Anathem: "The only way to preserve the integrity of the defenses is to subject them to unceasing assault".

I got a 9a to replace them just because I didn't want to have to deal with learning iPhone, but I'm fully expecting the 9a to fail with a similar issue so looking at buying an iPhone soon as a backup so I can get up to speed.

To steal a few examples from a convenient summary list someone[1] made:

1. The cult of tradition. “One has only to look at the syllabus of every fascist movement to find the major traditionalist thinkers. The Nazi gnosis was nourished by traditionalist, syncretistic, occult elements.”

2. The rejection of modernism. “The Enlightenment, the Age of Reason, is seen as the beginning of modern depravity. In this sense Ur-Fascism can be defined as irrationalism.”

3. The cult of action for action’s sake. “Action being beautiful in itself, it must be taken before, or without, any previous reflection. Thinking is a form of emasculation.”

4. Disagreement is treason. “The critical spirit makes distinctions, and to distinguish is a sign of modernism. In modern culture the scientific community praises disagreement as a way to improve knowledge.”

...

10. Contempt for the weak. “Elitism is a typical aspect of any reactionary ideology.”

Open to other definitions. But I look at that list, written in 1995, and it feels like you can check off a lot of these items in things that are rapidly being normalised.

1. https://www.openculture.com/2024/11/umberto-ecos-list-of-the...

Have you recently watched a civilian perform a basic task? Their first approach is to use Google and pick the top result - ad or otherwise. I think websearch /has/ ruined everyone's minds, and it is being exacerbated on a daily basis by AI.

But it was only ever a short term strategy; if they had persisted they would have had to reconsider.

I notice another poster said it's a bit slow but for many common use cases even half a second startup time is probably a small price to pay to be able to write in the language you're familiar with, use your standard libraries, etc.

This is not a popular opinion on software development circles - unless you're already in one of those regulated fields, like where a software engineer (a literal accredited engineer) is required.

But it's been an increasingly common talking point from a lot of experts. Bruce Schneier writes about it a lot - he convinced me long ago that our industry is pretty pathetic when it comes to holding corporations liable for massive security failures, for example.