If software engineering were truly solved, like Anthropic claims, anyone could just vibecode it back. If only they stopped being allergic to the word "open" and open-sourced Claude Code, which, at this point, there is no practical reason not to.
There are numerous copies of the source available for claude code now that it has been leaked. The vast majority of what makes CC useful is already present, and it's unlikely that any killer features will be added going forward.
So it's already possible for someone to "vibecode it back". It's just perhaps not legal.
It looks like an output of one of those AI video editors that some (often vibecoded) startups use for their product launch videos. Just drop some assets in, and it spams witty taglines with dramatic transition effects.
This is what many AI supply-chain security startups (like the one that posted the article) are already doing with all NPM packages, so save yourself the Claude tokens. All of these compromises were detected within minutes, but it takes some time (<1 hour) for NPM to unpublish all of the affected packages.
Sorry for my ignorance, but then couldn't we build this into NPM itself? So before a package is publicly available it would be quaranteened and checked.
The belief that there is some kind of market-impacting underground "wisdom of the crowd" to be found on all these public social platforms is an artifact of the GameStop craze that never went away.
It existed prior to GME as well, which really should tell you that anyone who is using this is going against people who have spent the last decade at least perfecting signals based on this exact same data.
The hope isn’t that you find some unique signal to trade on. The hope is you find some signal that does not scale in a meaningful way, so it is less likely professional firms are going to devote resources to trading it.
If you stumble into a fresh, scalable signal it’s unlikely it will continue to be profitable after six months. Once you scale to any real profitable size the market will notice and either change behavior, or trade the same signal at a faster speed.
Twitter/fb/reddit etc is like the towel that gets the water after it already spilled, while the hedge funds or advanced traders already placed sensors at the entire pipe to detect the leak.
A bit off topic, but see how Anthropic publicity stunts went from "Claude C Compiler" with 100K LOC to the recent Bun Rust rewrite with 1M LOC (10x!) in just 3 months.
I get that it's "novel" creation vs porting, but given that they reported that the C compiler cost them $20k in API costs, the Bun rewrite must be at least $200k, maybe even closer to a million. Pure madness.
Asking an LLM tp change programming language of an implementation is completely different from asking it to code from spec. It's orders of magnitude simpler in practice. I converted some 60kloc of Java to C++ and it works. There were some issues where the Java implementation used runtime reflection because that needs creative workarounds and not all of the C++ translations worked on the first try. And that was my first serious attempt at a task with an LLM. I could likely do better now. An important task simplification here is that a well designed codebase can be converted in small pieces and then joined back together. So the total amount of code converted becomes an irrelevant metric.
I don't know how it could fail - Bun loses popularity among devs? Is it an objective metric? From what I understand, Node.js remains dominant across the industry as a whole, with Deno and Bun mostly used by startups.
Anthropic can always fire the Opus/Mythos token machine gun on any problem (bugs, features, security) to ensure PR success, and there would be plenty of AI-sphere startups already drinking the kool-aid that would consider the whole vibe-coding thing to Bun's benefit.
> Anthropic can always fire the Opus/Mythos token machine gun on any problem (bugs, features, security) to ensure PR success,
Can they, though? They tried and failed to do it in their C compiler experiment. The experimenter wrote: "I tried (hard!) to fix several of the above limitations but wasn’t fully successful. New features and bugfixes frequently broke existing functionality."
Do Firefox not have tests? Then how was there over 200 CVEs found?
Are we going to be comfortable running a piece of software that has 1M lines, and who knows how many zero-days will be in it.
Yes, sure they are going to use LLM to find the CVE's, and so will the hackers. You need a day or two to fix the security issue, a hacker just need to put it in use.
It's 2026 so it's already been done 10x by 5x people who says AI is amazing but none of them is sharing the outcome because they either don't care or it doesn't even work.
Copilot is a legacy brand from 2021 (anyone remembers it's free beta? good times) when it was just a rudimentary autocomplete powered by GPT-3. I don't think it aligns with Microsoft's views and priorities now.
reply