Passa ai contenuti principali

The impact of AI on the labour market. A (somewhat) contrarian view

The impact of so-called "AI" in coding, programming, cybersecurity is deep and will be more and more so. Many kinds of activities will become much faster or are already so.

Predicting the implications of these facts on the job market is hard, though, as predicting the future always is.

When I was a student I used to buy the BYTE magazine every now and then. In September 1990 I bought this issue, that I still have in my library: 


The Internet had been "invented" several years earlier (TCP September 1981, DNS November 1983). I took my degree in December 1989 and at the time we did have the ability to download files from very far away and obscure locations, with ftp. A couple of lectures about computer networks were part of one of the courses I took in 1988. Yet, in 1990, none (none) of the "63 of the World's Most Influential People in Personal Computing" included the Internet in their "predictions of the future". One of the few truly disruptive technologies of the last century; a technology that has transformed our society in ways that are difficult for those who were not around before to understand. Yet many knowledgeable and competent people were unable to realise its importance. Just a couple of people mentioned something like "the convergence of computing and communication tecnologies".

The blockchain...ahh, the wonderful blockchain that will soon disrupt how companies sell, trade and so on and so on (Deloitte 2019, PWC 2020). Is there anyone who can point to a successful blockchain application (except for cryptocurrencies) that is really based on a blockchain (rather than on something that is different but is named blockchain anyway for marketing reasons)?

And please let's not forget the billion dollars impact that NFT and the metaverse "could have by 2030" (Morgan Stanley 2021). A bright future just around the corner: "our hope is that within the next decade, the metaverse will reach a billion people, host hundreds of billions of dollars of digital commerce, and support jobs for millions of creators and developers.". Expectations that have not aged well.

Nowadays, a lot of people feel fully sure about what the technological future will bring us. AI will disrupt the job market, there will be no more need for you name it and so on.

You will forgive me if I am a bit skeptical.

As I wrote at the beginning, predicting the future is difficult. I am no exception, of course. However, I firmly believe that there is far too much hype today about the impact of AI on our work and the job market. In my opinion, this hype is often propagated by organizations and people in one or more of these categories: with immense conflicts of interest for economic reasons; that only read headlines acritically; that do not really understand how AI works or the reality of the jobs that will supposedly be replaced by AI (of course, there may be people much smarter and more competent than me that have, in good faith, an opinion different from mine).

Furthermore, I firmly believe that the need for certain skills and competencies will remain. Probably AI will make some of these competencies even more important than they are today.

A few sentences copied from a very interesting and very well written report that I found this morning (and that pushed me to spend one hour writing this blog post):

Your AI assistant just received a WhatsApp message. It ran a shell command. Then it wrote new code and executed it. This is how OpenClaw works by design — and why 104 vulnerabilities appeared in 18 days.

OpenClaw (previously known as Clawdbot and Moltbot) is an autonomous local AI agent that can write code, run shell commands, access files, send messages, and control a browser. It has become the fastest-growing GitHub repository in history. When the pace of development overtakes security scrutiny, bad things start to happen.

On February 19th, 23 vulnerabilities were reported on OpenClaw in a single day, more than half of them rated High or Critical severity. This volume in such a short span of time is unlike anything we have seen in the history of software security.

104 vulnerabilities were published in just 18 days (February 2–19) — more than 100 CVEs in a month. 
  • The vulnerability classes are as follows:
  • CWE-78 (OS Command Injection): 14 issues 
  • CWE-22 (Path Traversal): 16 issues 
  • Injection (XSS/CSRF/Prompt): 17 issues
  • Auth bypass or missing auth: 16 issues 
None of these vulnerability classes are new. They have appeared in the OWASP Top 10 repeatedly. The fact that AI introduces them in bulk points to a deeper problem.

Dangerous by Default: What OpenClaw CVE Record Tells Us About Agentic AI

Commenti

Popular Posts

"Ingegneria deve essere difficile"

Il ritaglio di giornale qui sotto ricorda uno degli eventi più non-trovo-un-aggettivo-appropriato del mio periodo di studente di Ingegneria a Pisa. Ricordo che una mattina iniziò a spargersi la voce "hanno murato la porta del dipartimento!".  Andammo subito a vedere ed arrivammo un pò prima dei giornalisti che scattarono questa foto. La porta era murata, intonacata, pitturata di bianco e sovrastata da una scritta "INGEGNERIA DEVE ESSERE DIFFICILE". Le "E" di "INGEGNERIA" erano scritte al contrario perché era una sorta di "marchio di fabbrica" della facoltà di Ingegneria di Pisa. L'aula più grande, quella in cui pressoché tutti gli studenti seguivano i corsi dei primi anni, aveva infatti alcuni bellissimi "affreschi scherzosi" che furono fatti nel corso delle proteste studentesche di qualche anno prima ed in cui la parola "Ingegneria" era appuntoi scritta in quel modo. Si era anche già sparsa la voce di cosa era ...

On the Anthropic Mythos Preview - "too dangerous to release"

(updated twice after first posting, see below) On April 7-th 2026, Anthropic issued a technical report titled  Assessing Claude Mythos Preview’s cybersecurity capabilities . This report has quickly sparked the all-too-common (and deeply misleading) narrative of an imminent cybersecurity apocalypse due to the (supposedly) immense and groundbreaking capabilities of AI. For example, The New York Times :  I’m really not being hyperbolic when I say that kids could deploy this by accident. Mom and Dad, get ready for: "Honey, what did you do after school today?” “Well, Mom, my friends and I took down the power grid. What’s for dinner?” That is why Anthropic is giving carefully controlled versions to key software providers so they can find and fix the vulnerabilities before the bad guys do — or your kids. What does Anthropic say? The following paragraphs contain a slightly edited AI-generated summary of the Anthropic report Anthropic has introduced Claude Mythos Preview, a langu...

Perché studiare Analisi Matematica???

Un mio caro amico mi ha scritto: ...sono con mia figlia che studia Analisi 1...A cosa serve, al giorno d'oggi, studiare Analisi (a parte sfoltire i ranghi degli aspiranti ingegneri)? Riporto la mia risposta di seguito, forse può "motivare" qualche altro studente. ... Per un ingegnere la matematica è fondamentale perché è un linguaggio ; ed è il linguaggio essenziale per trattare gli argomenti che dovrà affrontare come ingegnere; non sono importanti i contenuti specifici; è importante, anzi fondamentale, che riesca a capirli, ricostruirli etc. ad esempio, chi deve usare l'inglese, lo usa perché in un modo o nell'altro lo conosce; nessuno di noi ha usato esattamente le frasi o i dialoghi o le regole che ha incontrato negli esercizi di inglese o di tedesco; nella matematica è lo stesso; non sono importanti i limiti, le serie, i teoremi di cauchy o che so io; ma se uno non è in grado di capire quel linguaggio allora non sarà in grado di capire davvero quas...

More detailed assessment of Anthropic Mythos Preview

A follow-up to my previous post on Mythos Preview. The AI Security Institute (AISI) has published a very interesting analysis of Mythos Preview . Very interesting because: AISI is " a mission-driven research organisation in the heart of the UK government ". Its reports are clearly much more credible than claims of the form " our last product is too strong to give you, believe us " by a private US company, that is currently losing lot of money, that is fiercely battling against other  companies in the AI arena, that is extremely good at fuelling hype about their products and capabilities. They consider complete cybersecurity tasks, i.e. CTF (capture the flag) competitions and attacks to a simulated organization. They compare the behavior of different models for a given "token budget". Not surprisingly, Mythos Preview is indeed very good and better than previous models, but it is definitely not the coming Apocalipsis. In particular, it is the first tool th...

Anthropic Mythos - from the inside

 An excerpt from a blog post by one of the maintainers of curl . A person with a lot of "real world experience" on one of the most widely used software tools in the planet. Everything in the bulleted list below has been just copied-and-pasted (bold is mine, it was not in the original post). I have not added any comment, it is not necessary. This analysis goes in exactly the same direction that I hypothesized in my previous posts ( here and here ). Before this first Mythos report, we had already scanned curl with several different very capable AI powered tools (I mean in addition to running a number of “normal” static code analyzers all the time, using the pickiest compiler options and doing fuzzing on it for years etc)... These tools and the analyses they have done have triggered somewhere between two and three hundred bugfixes merged in curl through-out the recent 8-10 months or so. A bunch of the findings these AI tools reported were confirmed vulnerabilities and have b...