Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

I got 2x faster with AI. I also got 2x better at shipping bugs I couldn't catch.

I stared at a bug for 45 minutes last week that Claude had introduced three days earlier. The function looked fine. It passed my review. It even passed a quick manual test. It broke in production because the AI had confidently used an API…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I stared at a bug for 45 minutes last week that Claude had introduced three days earlier. The function looked fine. It passed my review. It even passed a quick manual test. It broke in production because the AI had confidently used an API method that doesn't exist in the version we were running, and I had no idea because the code read like it was written by someone who knew what they were doing.



That's the thing nobody says out loud: AI makes you faster and simultaneously makes you worse at catching mistakes.



I've been building with AI assistance pretty much daily for the past year. My output velocity is genuinely up, maybe 2x on a good week. Features that used to take me a full day I can now push in a morning. But somewhere around month three I noticed something uncomfortable: my bug rate wasn't going down at the same rate my speed was going up. If anything, the bugs were getting harder to catch, because they were surrounded by good-looking code.



The failure mode isn't obvious AI slop. It's not hallucinated function names in a language the model clearly doesn't know. It's confident, well-structured, plausible code that breaks on a specific edge case the model didn't think about because it had no reason to think about it. The model doesn't know your database has nulls in that column. It doesn't know that the third-party library you're using has a breaking change in v2.1. It doesn't know that your team has a convention around error handling that isn't written anywhere. It just writes the most statistically reasonable thing and moves on.



Confidence without context. That's the actual problem.



The obvious counterargument here is: just review your code better. Write tests. Don't be lazy. And okay, yes, that's true. But also: the whole reason I'm using AI is to move faster, and careful line-by-line review of every generation eats exactly the time I thought I was saving. You're not going 2x, you're going 1x with extra steps and a false sense of security. There's a real tension here and pretending there isn't doesn't help anyone.



What actually changed things for me wasn't slowing down the AI. It was giving it better constraints before it started.



I started writing structured context files for the domains I work in most, things like: how we handle API errors in this codebase, what version of what library we're on and why, which patterns we've explicitly decided not to use and why they're tempting. Not a prompt. Not a system message. An actual file that sits in the project and gets pulled in when I start a session. The model stopped making the same class of mistakes because the mistakes were coming from missing information, not missing intelligence.



This is the thing I think the whole "vibe coding" conversation misses. The productivity gains from AI are real, but they're fragile. They depend on the model having enough context to be right, not just fluent. Fluency is easy. Context is the hard part, and right now that burden is almost entirely on you. The model will never tell you "I don't have enough information about your codebase to answer this confidently." It will just answer.



Structured skill files are a partial solution to this. Not a complete one, but a real one. When you encode your conventions, your stack constraints, your known gotchas into a format that travels with the project, you're not making the AI smarter. You're reducing the gap between what it knows and what it needs to know to be useful rather than dangerous. The bugs don't disappear entirely, but the class of "confidently wrong" bugs shrinks noticeably.



I still ship faster than I did before AI. I'm not going back. But I'm also a lot more honest now about what I gave up to get there, and a lot more deliberate about how I give the model the context it needs to not quietly break things I'll spend 45 minutes debugging on a Thursday afternoon.



The speed is real. The cost is also real. Both things are true, and pretending otherwise is how you end up trusting code you shouldn't.



We built npxskills.xyz partly because of exactly this problem, structured skill files that install into your agent and travel with your project. If that's the direction you want to go, that's where we put the work.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
1 Warnungen
title: Detect Exploitation - I got 2x faster with AI. I also got 2x better at shipping bugs I couldn't catch.
id: 6730ba45-9055-492d-ba8b-e508f83afddb
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      DestinationHostname:
        - 'npxskills.xyz'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "I got 2x faster with AI. I als" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
(dest_host="npxskills.xyz")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
destination.domain: ("npxskills.xyz") and event.category: "network"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where DestinationHostName in ("npxskills.xyz")
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

IoC Intelligence (1 Indikatoren)
npxskills[.]xyz
CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I got 2x faster with AI. I also got 2x b.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I got 2x faster with AI. I also got 2x better at shipping bugs I couldn't catch.

Thematisch verwandte Begriffe: faster, with, also, better · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-88003 | InvoicePlane is a self-hosted open source application for managing invoi…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag