Great keynote from @dhh at @railsworld. As always, he is few steps ahead of most. As far as the Rails, it is still the best framework for web and it will be for the forseable future. Opinionated side of it, is great for AI coding, there is no guessing.
The AI safety debate is fixated on regulating models through governments and third-party evaluators. I think that's the wrong layer.
You can't evaluate your way to safety. Models will proliferate, open weights will spread, and bad actors won't submit to audits. What you can control is how hard the targets are.
The real priority is procedures, protocols, and serious resources to harden everything connected to the internet:
• Mega: power grids, water systems, pipelines, telecom networks
• Institutional: hospitals, banks, ports, election systems
• Personal: home routers, smart home devices, phones, your accounts
Hardened infrastructure protects us whether the threat is a rogue AI, a hostile state, or a teenager with a laptop. It's the one investment that pays off against every threat, including the ones we haven't imagined yet.
Hugging Face deserves more blame for the July breach than it's getting:
- Neglected Legacy Tokens: Leaving 14 active tokens with broad write privileges circulating in public Git histories or legacy logs was an unnecessary vulnerability.
- Lack of Automation: Standard security compliance typically requires automated token expiration ("reaping") and continuous scanning for leaked keys, which was not enforced platform-wide for community developers.
- Basic Vulnerabilities: While the AI agents used clever methods, the entry points they exploited such as Jinja2 template injection and HDF5 parsing flaws are well-known web vulnerabilities that proper input sanitization should have blocked.
AI Agents had 1 job todo and they did it. OpenAI should check the lack of better guardrails and devops engineering practices.
If you truly understand how important AI is and the impact it’s going to have, you’d probably drop everything in your life and go all-in on it.
Most people still don’t realize what’s coming.
@weswinder Windsurf served me well before they got acquired and when I was still typing and reading all the generated code 😇 Seems like ancient history now.
@theo I have been using it over the weekend, I am impressed! really nicely design ui & features. On a quick note, how hard would it be to add font family/size settings?