Steve Yegge says agentic coding is widening the attack surface faster than defenses
AI Engineer · youtube · 2026-07-21
Steve Yegge's talk says the real title is basically: be scared. The core argument is that agentic coding multiplies the software attack surface faster than teams can secure it.
- A bank security architect's rule of thumb frames the problem: if everyone ships 10× faster and defect rates hold, the vulnerable surface grows 10× too.
- Yegge highlights slop squatting: a model hallucinates a package name, someone publishes that exact package with a backdoor, and the build still passes.
- His answer is to split security into its own pass, with real tools like Snyk and Chainguard checking the work before and after the agent acts.
- He also points to an industry warning that open-source models may be able to autonomously hack production systems within months, not years.
More from coding & agent
- Astra storyboards plus Minimax H3 per-shot generation boost video success rates — Hailuo_AI · 2026-09-11
- Codex tip: use Sol with Astra and Luna sub-agents to save usage — pvncher · 2026-09-11
- agents-best-practices: a provider-neutral Agent Skill for designing and auditing agentic harnesses — tom_doerr · 2026-09-11
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11
- First-ever Three.js Conference lands in Paris, with a panel on AI-shortened design workflows — OdinLovis · 2026-09-11
- Agile co-author Ron Jeffries publishes 'Resist AI', urging developers to push back — mborch · 2026-09-11