Steve Poole
384 viewsYour AI Assistant Is Choosing Your Dependencies
AI code generation doesn't just write your Java. It picks your suppliers, edits your build and pulls in ecosystems you don't know. What …
Steve Poole
24 articles
70,320 viewsSteve Poole
384 views
Steve Poole
645 viewsAI Found the Bugs. Who's Patching Your EOL Java Code?
AI finds decades-old flaws at machine speed, but the fixes only reach supported versions. What that means for end-of-life Java, and what to …
503 viewsFoojay Podcast #100: Java Podcasters on Why They Started, What Broke, and What They Learned
Foojay Podcast hits episode 100. No plan, no roadmap. It just happened. To mark the occasion, Frank turned the microphone around and invited …
Steve Poole
1,818 views7 Jackson CVEs in One Day: AI-Assisted Security Research
Seven jackson-databind vulnerabilities, one researcher, one day. Two critical RCEs. This is AI-assisted security research in practice.
Steve Poole
1,233 viewsDid AI Just Break Software Security For Ever?
AI finds exploits in hours. Patch cycles run 30–60 days. EOL software gets neither. Here's what changed in 2026 and what to do about it.
Steve Poole
2,195 viewsSpring Boot 3.5 Migration and the CRA: When Good Enough Isn't"
Spring Boot 3.5 reaches EOL on June 30. The legal context is about to change. Here's what 'without undue delay' means when commercial …
919 viewsFoojay Podcast #95: Is Your Java App Actually Secure, Or Does It Just Look That Way?
Is your Java application actually secure, or does it just look that way? In this episode of the Foojay Podcast, Frank is joined by Steve …
Steve Poole
3,515 viewsSpring Boot 3.5 EOL — The CVE Blind Spot Nobody Talks About
Spring Boot 3.5 goes EOL June 30, 2026. But the real risk isn't the migration. It's what happens to CVE reporting once a project reaches end …
Steve Poole
1,460 viewsSpring I/O 2026: Field Notes from Barcelona
Three days at Spring I/O 2026 in Barcelona. Agents, Embabel, the sessions that didn't get the main stage, and a booth full of dragons
Steve Poole
2,136 viewsWhy Java Developers Over-Trust AI-Generated Code
AI coding tools sound confident even when they're wrong. Here's the psychology behind why Java developers accept bad suggestions — and …