> Truly a perfect news alert

https://bsky.app/profile/paleofuture.bsky.social/post/3mgppdsqm2k2n

It turns out GenAI code changes are causing serious incidents and outages at Amazon with "high blast radius" https://www.ft.com/content/7cab4ec7-4712-4137-b602-119a44f771de

Junior / middle engineers no longer allowed to push GenAI code to production without senior engineer review

(HT @nprofile1q... )

I am convinced we are on the verge of the first "AI agent worm". This looks like the closest hint of it, though it isn't it quite itself: an attack on a PR agent that got it to set up to install openclaw with full access on 4k machines https://grith.ai/blog/clinejection-when-your-ai-tool-installs-another

But, the agents installed weren't given instructions to *do* anything yet.

Soon they will be. And when they are, the havoc will be massive. Unlike traditional worms, where you're looking for the typically byte-for-byte identical worm embedded in the system, an agent worm can do different, nondeterministic things on every install, and carry out a global action.

I suspect we're months away from seeing the first agent worm, *if* that. There may already be some happening right now in FOSS projects, undetected.

This is pretty broad but thank you every open source developer who makes my computer awesome