Korva is a scroll of the internet’s best ideas.
Reasons to buy software are vanishing
Agents that maintain software
An agent can write the first version of an app and then keep going: it takes user feedback and iterates, so an entire autonomous loop builds and maintains the software. Management on top of it is light-handed. In one version, feature requests arrive as cards to swipe left or right on, and the agent maintains the software itself. That matters to people who built something, found users, and now have a job as a full-time software developer because those users keep asking for features.
Security follows
Maintenance stops being an issue, and security follows. Agents are close to being better than people at writing secure software and at scanning software for security issues.
Replit's analytics tools
At Replit, an AI tool that builds software, the team used to run three or four different analytics products. Those either inject themselves into a company's traffic and store its data on their end, which is a privacy and security concern, or they connect to only one data source. The Replit agent can instead write a Python program that joins the data warehouse with the production Postgres database and presents the interface. Replit canceled or downsized most of its analytics products as a result.
Why does software cost more to maintain than build?
Software that people use keeps running into a changing world: new devices, new operating system versions, and new user requests. Meir Lehman, who studied software evolution beginning in the 1970s, formulated laws stating that a program used in the real world must keep adapting or it becomes steadily less useful. Robert Glass's book Facts and Fallacies of Software Engineering reports that maintenance accounts for a large share of a program's total lifetime cost, often cited as 40 to 80 percent. Fixing and extending existing code also requires understanding it first.
How do analytics tools collect a company's data?
Many web analytics products work by placing a small script on each page that sends every visit and click to the vendor's servers, where it is stored. Google Analytics grew from Urchin, a product Google acquired in 2005, and used this approach. The alternative is to query data a company already holds in its own warehouse. A SQL join combines rows from two tables that share a key, such as a user ID, which is how data from separate systems gets matched.
How does software get scanned for security flaws?
A common method is static analysis. A tool parses the code into a structure called a syntax tree and searches it for known dangerous patterns, such as user input flowing into a database query without being cleaned. That pattern is called SQL injection. The Open Worldwide Application Security Project, known as OWASP, has listed injection among the most common web application risks in its Top 10 for many years.
More from Casey Newton
