SaaS
Security holes I find in almost every vibecoded app
Nothing wrong with vibecoding. My own SaaS is 90% vibecoded. The problem isn't that the code is messy and messy code makes money every day. The problem is the AI writes the feature and never writes the guard around the feature. I found that out the hard way on my own app: I could pull my own users' data from a logged-out browser. Fixing that whole class of bug is what got me my internship, and since then I've torn through a LOT of apps built on Cursor, Lovable, Bolt, Rork, Claude , all of it. ...
Read the full discussion on Reddit
This article was aggregated from Reddit. Click to join the conversation.
View on Reddit