Fuzzing and LLMs finding bugs

Today Quincy Larson interviews Carl Brown, who runs the Internet of Bugs YouTube channel and has worked as a dev at Amazon, IBM, Sun Microsystems, and startups for over 37 years.

We talk about: - The hype versus the utility in LLMs and agent code generation tools - Why you might want to target developer jobs at smaller companies, and how these differ from "big tech" - How everyone will face agism eventually. Carl argues that a consulting career is a great escape hatch.

Support for this podcast comes from the 10,113 kind folks who donate to our charity each month. Join them and support our mission at https://donate.freecodecamp.org

Get a freeCodeCamp tshirt for $20 with free shipping anywhere in the US: https://shop.freecodecamp.org

Links from our discussion: - My interview with Stack Overflow founder Joel Spolsky whom we discuss: https://www.freecodecamp.org/news/trello-stack-overflow-founder-joel-spolsky-podcast-interview/ - Quincy's free book "How to learn to code and get a developer job": https://www.freecodecamp.org/news/learn-to-code-book/

Ted Chiang "ChatGPT Is a Blurry JPEG of the Web" article Carl mentions: https://www.newyorker.com/tech/annals-of-technology/chatgpt-is-a-blurry-jpeg-of-the-web

The Karpathy on Moltbook saga: //Karpathy hyping up MoltBook https://x.com/elonmusk/status/2017370646767145419 //Noon Jan 30

//Doubles Down after "being accused of overhyping" Moltbook https://x.com/karpathy/status/2017442712388309406 // 9:39 PM Jan 30

// Tweet showing Karpathy's (redacted) private information from a MoltBook security breach https://x.com/theonejvo/status/2017732898632437932 // 4:53PM Jan 31

// Fortune quotes Karpathy saying MoltBook is "a dumpster fire, and I also definitely do not recommend that people run this stuff on their computers" https://fortune.com/2026/02/02/moltbook-security-agents-singularity-disaster-gary-marcus-andrej-karpathy/ // Feb 2

Quote from Cory Doctorow about code failing well: https://pluralistic.net/2026/01/06/1000x-liability/ Excerpt from Cory's Mastodon with that quote in it: https://mamot.fr/@pluralistic/115848576290992814 Mastodon from Carl to Cory telling him I'm going to use that quote (which he boosted): https://mastodon.social/@carlbrown/115867074293449215

Article on Claude 4.6 being good at finding bugs with fuzzing: https://red.anthropic.com/2026/zero-days/

Reference to it from Computer Security Guru Bruce Schneier: https://www.schneier.com/blog/archives/2026/02/llms-are-getting-a-lot-better-and-faster-at-finding-and-exploiting-zero-days.html

Older paper on LLMs being good at fuzzing prior to this new claim about claude 4.6: https://arxiv.org/html/2508.01750v1

Falsehoods programmers believe about names from Patio11: https://img.sauf.ca/pictures/2025-10-23/61fb6db44e7173cd9318753c955f7dda.pdf

Same kind of article, but this one is about time instead of names (Carl said he was wrong in that Partick/Patio11 didn't write this one, but it's worth passing along): https://infiniteundo.com/post/25509354022/more-falsehoods-programmers-believe-about-time

Article with discussion of ageism in tech with the Zuckerberg quote Carl was thinking of: https://www.forbes.com/sites/stevenkotler/2015/02/14/is-silicon-valley-ageist-or-just-smart/

Book on (interpersonal) networking that Carl recommends: https://www.penguinrandomhouse.com/books/227558/never-eat-alone-expanded-and-updated-by-keith-ferrazzi-and-tahl-raz/

And another one: https://www.penguinrandomhouse.com/books/105512/dig-your-well-before-youre-thirsty-by-harvey-mackay/

Carl's video on how AdTech is fracturing Society: https://www.youtube.com/watch?v=FmYXyWbis9w

Carl's Website: https://internetofbugs.com/

Community news section:

1. freeCodeCamp just published a comprehensive course that will teach you the fundamental concepts, protocols, and architectures of computer networking. You'll learn key network engineering topics like topology, subnetting, flow control, routing, IPv4 addressing, DNS, and more. (12 hour YouTube course): https://www.freecodecamp.org/news/computer-networking-fundamentals/

2. And we just published our second-ever chess course. This time you'll learn the Italian Game, one of the most common chess openings. This handbook and accompanying video course are taught by freeCodeCamp engineer Ihechikara Abba, who has a chess Elo rating of 2285. He will lay out the many traps that white can set for black, and how to not fall for them. (full-length handbook and 1 hour YouTube course): https://www.freecodecamp.org/news/the-chess-italian-game-handbook-traps-for-white/

3. freeCodeCamp also published a full-length book on Product-Led Research. This is a must-read for any manager within a tech company. It's written by a CTO and security researcher named Omer Rosenbaum, who says: "if you manage Research like it's Development, things aren't going to go well for you." He breaks down the most common research frameworks and methodologies, and contextualizes them through a series of case studies. (full-length book): https://www.freecodecamp.org/news/product-led-research-a-practical-guide-for-randd-leaders-full-book/

4. If you're a Python developer and use the Django web development framework, this tutorial will help you optimize the heck out of your APIs. Mari will teach you how to use profiling and logging to find bottlenecks in your codebase. Then she'll show you how to get extra performance through caching, so you can serve users at scale. (20 minute read): https://www.freecodecamp.org/news/how-to-optimize-django-rest-apis-for-performance/

5. Today's song of the week is 1984 synth jazz classic "No One Emotion" by George Benson. I love the driving synth bass, the vocal harmonies, and excellent guitar solo by Michael Sambello – the guy who made the She's a Maniac song. If you're looking for a pick me up jam this song any day of the week. https://www.youtube.com/watch?v=Q-MyvbolxG0