Public Apps Are Getting Riskier, So Go Smaller
AI finds flaws faster and reduces the clicks publishers once got from search, so he favors private tools.

Stratechery · End of the Internet | Stratechery by Ben ThompsonBen Thompson, a technology analyst who writes about tech strategy, had been describing a rough stretch for computer security when he offered his prescription for what to build next.
In his words: "The internet as we knew it is dead."
His point is that keeping something open to everyone has become more dangerous and less rewarding. Automated systems can hunt for weaknesses around the clock, and question-answering tools reduce the visits publishers once received.
Much of today's software was built to pass a simple test, whether it worked, not whether it could resist every possible break-in.
Attackers once missed many holes because people had only so many hours to look for them. Thompson says AI removes that limit by testing without pause, so he expects attacks to increase before defenses catch up.
Thompson writes that the public internet will be "a battle zone at best," meaning social media, and "a wasteland at worst" for much else. In that setting, putting a personal site or app on the open web invites trouble.
The alternative he favors is to build for small circles that already trust each other. He points to group chats, which he calls familiar and high trust, as places where people feel safe talking.
His own team offers an example. At his workplace, colleagues have built private tools for podcast production, task tracking, and calendars, none meant for public release. Separately, Thompson says he has built apps for himself to manage his house and sports viewing. Because AI has lowered the cost of making software, a tool useful to one person or one team can now be worth building.
Questions people ask
Why would AI make software attacks worse?
Most software was written to work, not to withstand every possible attack, leaving countless small flaws. People could only find and exploit so many of them. AI systems can scan code, try variations, and learn from failures around the clock, so flaws that once went unnoticed are found faster.
How do AI answers reduce traffic to publishers?
Search engines showed short previews that linked onward to other sites. Many AI assistants instead read those sites, write a direct answer, and keep the user in the chat. Publishers get less of the visits that supported advertising and subscriptions.
What does defense by AI agents look like?
He means security programs that watch systems continuously, detect intrusions, apply patches, and block suspicious behavior without waiting for people. In theory, they can respond in seconds rather than days. In practice, they still need careful limits so they do not break legitimate software.