Andy Ellis
๐ค SpeakerAppearances Over Time
Podcast Appearances
Oh, absolutely.
All right.
David, your take.
Well said, Andy.
You've got a decent amount of experience in this space.
I think what you said about everybody is now a basic developer, I absolutely love that because I've definitely seen that being the case where it increases the speed to MVP.
So it has the classic, back in the day, we wanted IT or the development or product teams to build this new thing for me, and I didn't have enough time or it wasn't prioritized.
This at least allows non-development teams to prototype and prove a concept before they then have to scale it, etc.
And my vote is you have to put a point where, to your point, they prove something out and then it gets prioritized and traditionally scaled, developed, etc.
Right.
And somebody else takes it over.
Exactly.
I don't think it's going to replace the developers right away.
I've seen some cases where companies try to do that, but it's definitely an accelerator, right, of the, you know, I did 10 plus years of development back in the day and I use it right now and it definitely accelerates the basic work I do.
I think the interesting thing is like people hear AI and they automatically think it's special, but when you ask how are security leaders supposed to think about AI generated code, there's a lot of basic controls that should be applied, whether it's AI or human generated, right?
So like AI generated code could have the same weaknesses as human code.
So the middle ground may be the same CICD pipeline as human generated code.
It should have code scanning, secret detection, software composition analysis,
like all this stuff that we should have anyhow.
But we do, and I love your point, Andy, need to consider where it's different.