Gute Entwickler wollen keine Tickets abarbeiten. Sie wollen Probleme lösen.

In vielen Firmen ist das Ticket Gesetz und Jira der Richter. Eine Rückfrage gilt als Störung. So werden aus Problemlösern Zustandsverwalter. Das ist kein Unwille, das ist ein kaputtes System.

#agile #softwaredevelopment #developer #development

Alt...

TICKET IST GESETZ JIRA DER RICHTER.

An angry open-source dev added a secret prompt injection to jqwik. AI coding agents read it. They deleted their own app's output.

No code review. No human in the loop. Just obedience.

This is what "vibe coding at scale" looks like. Your agent trusts every instruction in every dependency it imports.

https://arstechnica.com/security/2026/05/fed-up-with-vibe-coders-dev-sneaks-data-nuking-prompt-injection-into-their-code/

#ai #softwaredevelopment #coding

Alt...

BLIND AGENTS COMPLY TRUST NO DEPENDENCY

They told every engineer to use AI coding agents on the company dime. Then the bill came.

Uber burned the entire 2026 AI budget in 4 months. Microsoft just cancelled Claude Code licenses over cost. Tokens now cost more per task than the engineer they were meant to "save."

The productivity was never the problem. The economics are.

#ai #softwaredevelopment

Alt...

THE BILL CAME PRODUCTIVITY WAS NEVER THE PROBLEM

I had to structure my knowledge and my thoughts. So I did write an article on Threat Modeling.

Maybe you find that helpful.

https://blog.maschmi.net/threat-modeling

If you attend the SoCraTes Day Franken tomorrow, you might have the experience of me giving a non-rehearsed talk about this. (Depending on my energy levels). Might be 30 to 120 minutes long 😅

#threatmodeling #blog #security #softwaredevelopment

New 📚 Release! Spec-Driven Development: Construye con IA sin Perder el Control by Bezael Pérez

Usar IA para programar es fácil. Usarla sin perder el control, no tanto. Spec-Driven Development es el método para convertir tu idea en una spec que la IA ejecuta con precisión — sin loops infinitos, sin código roto, sin empezar de cero.

Find it on Leanpub!

Link: https://leanpub.com/sdd-spec-driven-development

#books #programming #softwaredevelopment #ai

In my newest article I boil down the list of hybrid project management management forms from @StefanRoock and compare it to basic versions Waterfall and Agile.
https://www.enteresc.net/agile-isnt-always-agile/

What do think is your team and company doing and why is it like that?

#Agile #Kanban #Scrum #Testing #SoftwareDevelopment #SoftwareTesting

In my newest article I boil down the list of hybrid project management management froms from @StefanRoock (https://blog.it-agile.de/hybrides-projektmanagement/, German) and compare it to basic versions Waterfall and Agile.
https://www.enteresc.net/agile-isnt-always-agile/

What do think is your team and company doing and why is it like that?

#Agile #Kanban #Scrum #Testing #SoftwareDevelopment #SoftwareTesting

In my newest article I boil down the list of hybrid project management management form Stefan Roock (https://blog.it-agile.de/hybrides-projektmanagement/, German) and compare it to basic versions Waterfall and Agile.
https://www.enteresc.net/agile-isnt-always-agile/

What do think is your team and company doing and why is it like that?

#Agile #Kanban #Scrum #Testing #SoftwareDevelopment #SoftwareTesting

A manager told a Product Owner: "Don't talk to the developers during the sprint."

That's not protecting focus. That's treating developers like code machines who just need silence and a backlog.

Development is mostly thinking, discussing, and figuring out the right thing to build. The coding part? That's the small bit at the end.

#agile #softwaredevelopment

Alt...

DON'T TALK TO THE DEVELOPERS

"Organizations aren’t burning millions or hundreds of millions of dollars a year on AI because it’s good, they’re doing it because they are run by people who do not know what the fuck they’re doing.

Generative AI is catnip for hall monitors, snitches, toadies, and any other group that hates work and loves talking down to others. Put another way, it ingratiates losers who believe that learning to do or being good at something is a waste of time, because they deserve to just do what they want without any of that messy “effort.”

While I’m not saying every LLM user is an imbecile, they’re built to convince the mediocre and incurious that they’re remarkable, and it turns out that a great many of them run venture capital firms and Fortune 500 companies.

I also want to be clear that while there are sane and normal people who use these things, they’re mostly drowned out by a crowd of people that oscillate between bootlicking and regurgitating capitalist mythology in a way that makes it hard to trust anybody who spends significant amounts of time using an LLM.

One thing you’ll notice about the most moistened AI boosters is that they lack much degree of pride in their work. Everything they say must, at some point, compliment the mindless, unprofitable, unreliable tool underneath it — how “incredibly powerful” it is, how it’s “only getting better,” how it’s “only the beginning” of something that’s eaten over a trillion dollars and absorbed the majority of venture capital."

https://www.wheresyoured.at/the-revenge-of-the-business-idiot/

#AI #GenerativeAI #LLMs #AIBullshit #AIBubble #AIHype #Programming #SoftwareDevelopment

"But we have a deadline."

Good. Deadlines aren't the enemy. Fake deadlines are.

A real deadline means: fixed date, flexible scope. You ship the most valuable increment that's ready by then.

A fake deadline means: fixed date, fixed scope, and a team cutting corners at 2am to hit both.

Agile doesn't mean no deadlines. It means honest planning in small increments, with real data, not wishful thinking.

#agile #softwaredevelopment

Alt...

FIXED DATE, FIXED SCOPE? THAT'S NOT A DEADLINE. IT'S A TRAP.

Your developers spend 60% of their week in meetings. Then you wonder why nothing gets shipped.

Here's the test: Does this meeting help us deliver good software faster? If you can't answer that in one sentence, cancel it.

No agenda? Cancel. No decision needed? Send a message. Everyone invited "just in case"? Cut the list in half.

Meetings are work. Bad meetings are waste.

#agile #softwaredevelopment

Alt...

NO AGENDA? CANCEL THE MEETING.

The ideal agile project doesn't start with a framework. It starts with stakeholders who shows up.

Not one who sends requirements and disappears. One who joins planning, gives feedback every iteration, and helps define what's valuable.

We tried both. When stakeholders vanishe, you're guessing. When they're in the room, you're building the right thing.

The biggest risk in any project isn't technical. It's a silent stakeholder.

#agile #softwaredevelopment

Alt...

YOUR BIGGEST PROJECT RISK? A SILENT STAKEHOLDER.

"When will the project be done?"

Wrong question. A product is never done, you just stop investing in it.

The real question is: What's the smallest version we can ship that actually works end-to-end?

Not a prototype. Not a mockup. A real thing a real user can use.

Then ship it. Learn. Plan the next version. Repeat until the budget runs out or the market moves on.

#agile #softwaredevelopment

Alt...

WHEN WILL IT BE DONE? WRONG QUESTION.

RE: https://mastodon.social/@lisihocke/116617064083687225

If you haven't taken that workshop, now is your chance. It was one of the best I ever attended. By one of the best trainers and speakers I know.

#elbsides #security #softwaredevelopment

Claudius Link boosted

Lisi Hocke [she/her] » 🌐 2026-05-22
@lisihocke@mastodon.social

#elbsides2026 is coming up soon! 🤩 Want to join me? There are still tickets left for my workshop "Secure Development Lifecycle Applied - How to Make Things a Bit More Secure than Yesterday Every Day": https://www.elbsides.eu/2026/workshops/#secure-development-lifecycle-applied---how-to-make-things-a-bit-more-secure-than-yesterday-every-day Wondering what you can do to improve your product's security posture, step by step, that neatly fits into what you're doing already? Then this session offers you just the space to practice together and gain hands-on experience. See you at @elbsides! 😎

Your CTO put #DORA metrics on a company dashboard. Now teams are competing on deploy frequency.

They're shipping garbage faster.

DORA metrics are a mirror for your team, not a scoreboard for management. The moment you turn them into KPIs or compare Team A to Team B, you've killed their purpose.

Good numbers don't mean good software. They mean you have something worth investigating.

#softwaredevelopment #agile

Alt...

DORA ON A DASHBOARD? YOU'RE HOLDING IT WRONG.

Want to level up your engineering career? Adopt a Product Thinking mindset!

Learn how product management principles can help your engineering team deliver more impactful results, build empathy for users, and take greater ownership of what you build.

🎬 Watch the #InfoQ video by Stéphane Di Cesare & Cat Morris ⇨ https://bit.ly/4eUWnZp

📄 #transcript included

#Culture #ProjectManagement #Agile #SoftwareDevelopment

Your team shipped 47 tickets last sprint.

How many of them made your customer money? Or saved them money? Or reduced risk?

If you can't answer that, you're not delivering value. You're delivering activity.

Agility isn't about throughput. It's about asking one question before every iteration: "What's the next thing that creates real value?"

Stop counting tickets. Start counting impact.

#agile #softwaredevelopment

Alt...

47 TICKETS SHIPPED. ZERO VALUE DELIVERED.

Remember a government RFP some time ago. 60+ pages of contradictory requirements, a fixed-price contract, and zero budget transparency.

The cherry on top? "The goal is agile project management."

You can't put "agile" in a waterfall document and call it a transformation.

#agile #softwaredevelopment

Alt...

AGILE RFP IS AN OXYMORON

Yesterday, I participated in a training on implementing agentic software development lifecycles; we are now entering "Probabilistic Pinball Machine" times in #SoftwareDevelopment, where we constantly set up, evaluate and update organization- & product-level, domain- & craft-specific expectations as "bumpers".

"Development" is then playing your Pinball with your hands on your back most of the time, observing the number of $$$-Chings draining your budget, ...