top | item 44157179

(no title)

emrah | 9 months ago

The hacks had to do with misconfigured databases, not directly related to the vibe coding

discuss

order

grumpymuppet|9 months ago

Were the database configurations "vibe coded"?

My understanding is the notion is about getting an application to "work" without any underlying theory of operation or evaluation of the imported context.

joshuanapoli|9 months ago

Supabase is really tough to make secure, and it is probably a poor choice if you are interested in vibe coding. Row Level Security is likely to be insecure if the author author doesn't have a deep understanding of Postgres or isn't paying careful attention to all of the generated code relevant to the database.

skydhash|9 months ago

Frontend is always in insecure land. There's no such things as secure and insecure code there (there may be correct and incorrect code). You can't trust anything that originates from the frontend (anything that comes outside of your servers really)