Gregor Riegler

@gregorriegler.com

Technical Agile Coach gregorriegler.com

This is absolutely nuts: hackers are hijacking high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email on the account. Meta's AI does it, hacker gets password reset code, they're in. A staggering security issue www.404media.co/hackers-simp...

Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked

The exploit shows the extreme risk of offloading technical support to AI.

404media.co

We keep telling AI what to do. But that's not where the value is. The problem is not that it doesn't know things. It does. The problem is that it doesn't understand. And so it doesn't know what questions to ask. That's what it needs us for.

Practice context discipline: The Yak Shaving Kata Work through the coding exercise to stumble upon unrelated problems you need to solve. Not allowed to reuse the same context and not allowed to do it in the same version control change set. How will you solve that? github.com/gregorriegle...

GitHub - gregorriegler/yak-shaving-kata: Kata to practice context discipline

Kata to practice context discipline . Contribute to gregorriegler/yak-shaving-kata development by creating an account on GitHub.

github.com

Here's what I'm missing in all the TDD Agent Harnesses I've seen. No one's asking the question: Is the existing design ready for the next red test? Or do we have to change something first? ​The Agent is just crushing through like a bulldozer, no questions asked. Well, that's not how this works.

It’s easier to see a problem than to avoid it. Even for LLMs. Models can often explain what’s wrong with an answer more reliably than they can avoid generating the flaw in the first place. Detection is a classification task. Avoidance is a generation task.

Agentic coding won't work with your PR workflow. It will incentivize larger, crappier, unreviewable, LGTM batches to hit the complexity wall fast. We need is a workflow that enables MMMSSMF (Many More, Much Smaller Steps, More Frequently), so that we can speed up while still being able to review it.

Spec-first approach is counterproductive when using AI. What AI brings to the table is superpowers to engage in serious exploratory, experimental approach to engineering.

The richest man on earth owns X. The second richest man on earth is about to be a major owner of TikTok. The third richest man owns Facebook, Instagram, and WhatsApp. The fourth richest man owns The Washington Post. See the problem here?

Given that we now understand we’ve been training AI to guess rather than to admit when it does not know, it should make us reflect on exams and the way we educate people.

I tell my agents to conclude with their confidence level. GPT-5 almost never gives me [10/10 confidence], while Claude Sonnet 4 does it very often. To think higher confidence is better would be foolish.

Elon Musk spoke by video to Tommy Robinson's anti-immigrant rally in the UK today. "You're in a fundamental situation here where, whether you choose violence or not, violence is coming to you," said Musk. "You either fight back or you die."

No other POTUS in history would make such flippant posts and statements about attacking an American city. The fact that this stuff is commonplace in the current administration and tolerated by so many is testimony to the moral rot we are suffering as a nation.

Bild

Considering the effort I spend making sure the agent only reads what it has to and to bring this into the simplest form, eliminating all noise, and to ration this in small as can be contexts. It makes me wonder. Why didn't we do those things earlier - for ourselves? Do we not care?

How is it that Atlassian builds tools that: - SO MANY people use - SO MANY people dislike (JIRA, Confluence. Previously also HipChat) They are defying the conventional wisdom for business success that starts with "build something people will love"

A problem with modern LLMs is that they are so convincingly anthropomorphic now that when they produce wildly incorrect responses like this one, my reaction isn't "oh, I found a bug", it's "you're a lying sack of shit!"... and that level of emotional reaction to a piece of code really isn't healthy.

🔬 Real Browser Behavior
Modern browsers like Chrome, Firefox, Safari, and Edge all follow this exact logic — because they conform to the official CSS standard. If you try this:

html
Copy
Edit
<style>
  #box { color: red; }                          /* (1, 0, 0) */
  .a.b.c.d.e.f.g.h.i.j.k { color: blue; }       /* (0, 11, 0) */
</style>

<div id="box" class="a b c d e f g h i j k">Hello</div>
The result will be blue text, because the rule with 11 classes has higher specificity.

I expect that consumer-facing AI programs will continue to improve and they may become much more useful tools for everyday life in the future. But I think it was a disastrous mistake that today’s models were taught to be convincing before they were taught to be right.