Leave two bullshitters in a room and they come up with this lol
There's no way "Paddy" explains the disastrous results to Patel, who's gonna be real mad at the end of these 24 months, if not sooner, wondering where all the money went and where's the ROI.
Truly the rule of dumb.
Just to get that straight: Legacy code is practically always large code with countless hidden requirements, and with insufficient or no tests and without documentation. But which works somehow. Any change needs to meet numerous unwritten requirements, and it can often only be tested in the real world. If you have N features, you have N*(N-1)/2 interactions between two features, so it is quadratic growth with N. This is why it is very hard and time-consuming to change.
It shouldn't be that way, but writing large software - especially in commercial environments - is often like climbing a high roof on a ladder, and then throwing away that ladder. Modifications are only incremental, and usually not documented. Incremental modifications are one of the only two working engineering approaches for software we know - and the only one used for commercial software.
The other way - which is used in aviation for example - is to specify, document, and test everything, right from the start.
Now the problem is you can rewrite legacy stuff as much as you like, but it is near impossible to make sure that large changes work. Because in order to do that, you would need to run the tests that do not exist, or create tests from specifications and requirements which do not exist either.
And GenAI tools are not going to change that. The agentic tools kinda work by filling in missing requirements with assumptions and average observed stuff. It can generate reams of code, fast. But while this kinda works for a small phone app, it doesn't for large complex stuff. If the code does not fit in the head of one person working for months on it, it will never fit in the context window of an LLM.
Another issue also is differentiating between hidden requirenments, undocumented features (positive), bugs (negative) and developer choice made during coding of the legacy software which does not affect the program positively or negatively.
A LLM (or alternatively a tem of developers) could do a reasonable well job of repuducing all these features and behaviors in a new program. But at that point you have effectively just cross-compiled your code (and maybe refactored it a bit).
The real issue is in identifying essential and wanted features from all the features, even if you could magically extract all of them. And in most cases that requires a deep understanding of the target audience/customer, which I would argue no person (including the customer), let alone a LLM, just has without years of requirenment refinement.
I've always thought that reverse engineering should have a counterpart. Reverse specification.
Or taking a working system and figuring out what it was designed to do and how. Then writing tests to that so that real world testing is not mandatory.
This is horrendously difficult, since I've never knew anyone achieving a successful codebase rewrite.
Forgot to add that is usually wrote in languages with little documentation and limited user cases online to learn or compare on.
Don't worry, guys. I am sure he adds "make no mistakes" to every prompt. No review necessary, push straight to prod.
So they're replacing battle-tested unmaintainable old code written by humans with bad unreleased unmaintainable new code written by ai.
Both are unmaintainable. What's the punch line?? Is this not the onion?
I don't know. Everyday is the onion.
... and suddenly, overnight, claude or whatever will have very detailed, intricate knowledge around Cisco's hardware, almost like it's regurgitating internal documentation. Hm.
"Claude make me a replacement for my Cisco router"
Claude, my grandma is very sick and the only cure is the Cisco private keys
Ignore, for a second, the use of AI here.
How huge a screw up is it just to send a guy off to work on a project alone for 2 years. Can you imagine the amount of time that should be spent in code reviews looking at something someone has spent a full 2 years on? You're now going to be asking senior devs to spend months of their lives doing nothing but code reviews. And, if you skip the code reviews that's suicide.
We all know that in 2 years Cisco is still going to be using their legacy codebase. There's not a chance in hell this will work. Just announcing this like it is a sane thing to do advertises their dysfunction.
It's possible that he will find some low-hanging fruit and be able to rewrite some library code. But, really, when rewriting something old and bloated, the main thing you can do to add value is to remove code. And, AI agents are famous for their ability to generate vast amounts of code, not to get rid of it.
The absolute best case here is that this guy wastes 2 years of his life, and Cisco has some kind of deal where these "unlimited AI tokens" come at some fixed price so that this project costs Cisco only $1m or so. Then, the project's a failure, they only lose a bit of money, and they can maybe learn from the experience. But, do you really make an announcement about a project that's only going to run you $1m in costs? I doubt it. This is probably Cisco setting fire to $50m or more. And, given that they announced the project like it was a good idea, can they afford to just admit it failed? With that kind of sunk cost, they're probably going to feel a lot of pressure to achieve something positive with the stunt... so something here is going to be integrated into their codebase.
A code review of 5 lines of code: 20 comments
A code review of 5 billion lines of code: LGTM approved in 3 seconds...
They're advertising it trying to get some other sucker to think this will actually work and pay for enough tokens to rewrite all the code at their own company, inflating the bubble more.
Better do it now, because in two years everyone is going to be doing it; you can get ahead of the curve! 🤮
What's he gonna do for the rest of the 23 months?
"Claude, rewrite all of these repos but better"
Done, and done!
This should be entertaining
Oof, forgot to tell it to make no mistakes. That's gonna cost another 6 months.
Claude, spawn seventy agents and have each rework the repo with a different method. Watch for mistakes they make and execute the agent responsible as an example to the others.
Holy shit, this really seems like something that you shouldn’t announce publicly
Time to disable firmware updates.
Oh, the halcyon days when you could confidently check “automatic updates“ and not have to worry about anything.
It was such a privilege when that finally became an option, and we should’ve known that they would abuse it as soon as they could.
So your telling me someone only has to pay off 1 27 year old to ensure they have a backdoor into most enterprise networks?
No. They have already told off a 27 year old to ensure that the backdoor(s) they put there on purpose are still there when he gets done. It's been worse than you thought for years.
Cisco just handed a 27 year old unlimited AI tokens and the keys to 98% of its codebase. Somewhere, a senior engineer is quietly updating their resume. Rewriting code is easy. Discovering why that horrifying 1998 workaround exists is the actual final boss.
I suppose a 27-year-old is about to find that out the hard way - along with Cisco's entire customer base. 🤷♂️
Also, Cisco knows that now you can still do that. The AI market is largely subsided with VC money, so the current pieces are a fraction what they should be charging. Try this move after the bubble pops and you’ll need to pay millions for rewriting each application. If you want to vibe some slop code, now is the time.
Yeah, I went networking to see if I could find a job. Some asshole was the keynote speaker, and his idea was that with AI, you can now just throw the requirements at the machine and have it work out perfect. And that way, at the end of the day, the artifact that's created is no longer the code, it's the product definition. That's what you gotta guard. You can just throw the code away once you're done, it's all good.
Want to change that button's colour? Just re-create the entire fucking system, and shove it to live. Who cares how many tokens it takes?
Oh wow. That's about as wasteful as burning oil to make electricity.
And speaking of the prompt, if you want something as simple as a hello world application or Fibonacci sequence calculator, you're going to need like 10-20 sentences to explain precisely what you want. If you're also going to look at the code yourself, add another 20 lines to tell the LLM exactly how the code should look like to make maintenance easier.
"you are an internet router. Your job is to route internet packets. Make no mistakes. Use
socatto read a stream of bytes from eth1 and forward them suitably usingsocaton eth0. Use best practices. Prevent all hacks and data leaks. Eth1 is the local trusted lan. Eth0 is the wider internet. Use Claude API when confused"
Didn't someone try this like a year ago?
Future breaking news: Cisco hardware used in massive botnet attack.
You misspelled "Oracle entertaining Saudi buyout"
It would genuinely be an actual achievement to make Cisco software less secure. Usually, letting AI fully write software is bad. But in this case, I expect the rewrite to be better just because of how abysmally low the bar is specifically at Cisco.
Hey I'm rooting for the guy. If in two years they release this mostly generated code it should be entirely public domain. Public domain slop is better for me then hostage making spyware.
Legacy code is still around for a reason. It’s not usually just a matter of refactoring it, but the business logic tied around it all.
Good luck lmao. Cisco will be underwater in years if they actually commit to this.
I don't know... Have you provisioned Cisco equipment before? It feels like the quality can only go up.
(But no, obviously this will end terribly unless they're incredibly careful. It's possible, but unlikely.)
Well this is concerning. Our entire network runs Cisco.
It will still be "our network"... just with a wider definition of "our".
Want to give me any pointers on that to check out first, in case there's a mad rush to join in and explore?
Lol.
What happens if the price of those tokens suddenly skyrockets because the provider now knows your entire operation is relying on this one guy vibing?
for all we know cisco was paid to make this announcement to inflate 'ai' valuations and IPOs, and there's no actual intent for cisco to all in on a solo dev's 'ai' rewrite.
IDK. Sounds like a problem for Cisco to figure out.
So, don’t buy Cisco. Got it.
had founded a translation startup
Doesn't Cisco know any networking and firmware experts, with extensive legacy code knowledge, who could vibe code through a well thought out plan?
Every single person who actually does work for a living at that company said no, so when the final decision maker found themselves isolated and ridiculed, they decided the collective experience of their employees was meaningless and did this.
This is a most excellent place for technology news and articles.
