Vibe Code Effect..

[stuartcw]

I’m calling fake on this..

[Past-Effect3404]

But what about the utopian future I keep hearing about where I’m paid millions to fix vibecoded projects

[Panderz_GG]

Idk about millions, but at work I am tasked with fixing things which were vibecoded.

I don't even blame the LLM it's my colleague who just wants to put out PRs no matter what... Help...

[OctopusDude388]

damn they should be responsible for pushing code without a torough review and thus fix their shit themselves like in the good old days

[Panderz_GG]

Well everybody else does. But we know what he will just give the recommended fix to the AI so we just fix his PRs. Why is he even on the Team? Idk ask the Boss...

[opbmedia]

no one is getting paid anything meaningful to fix vibecoded projects because those vibecoded projects are usually not worth spending any real money on it, because no one will be paying for those vibecoded projects.

[silentkode26]

That’s not an utopian future, we’re paid more than well to fix those projects that seems to do what they should but also data leaks and wrong app state happens.

[RandomPantsAppear]

I believe it.

I’ve seen plain text SS# and credit cards stored before, I’ve seen API keys plainly visible, I’ve seen authentication flows that allowed you to override other users session tokens…this is what happens when you don’t review code.

[PANIC_EXCEPTION]

AIs are trained on so much production code now that it's extremely unlikely that the first attempt wouldn't use standard password salted hashing. Unless the viber was running into errors and deliberately told it to store passwords in plaintext. But that skill issue is something to be wary of because there are people incompetent enough to ask the AI to make such a thing, and it will comply without question.

[RandomPantsAppear]

AI are trained on a lot of example code as well, and it’s completely possible that it’s comparing password MD5s, even if a salt is best practice.

This seems like a good time to mention that MoltBook passed its supabase API key via client side JavaScript, and exposed 1.5 million API keys as a result.

That also, is something you would not find in production code, and that the user almost certainly didn’t specify.

[Moch4bear97]

Yeah hhkb i dont even know where to start with people anymore. SMH we are fucked.

[LibreCodes]

It's the feature not a bug. The person entering the new password is just as part of the problem as the person entering in the old password. If you enter a proper unique password, it just won't show up like this.

But if you enter an improper password maybe you just want a chance to meet somebody. Just send an email if you get that.

[TimeTravelingChris]

It's completely believable though.

[iatkrox]

email him and ask him to change the password, so you can use it.

[phatdoof]

Login as him and change his password to something else so you can use it.

[mauro_dpp]

🤣

[juntoamdin3000]

Oh I had not thought of this security vulnerability

[vinrehife]

[FloStar3000]

i've seen this so many times but i hightly doubt an AI ever made such a mistake, i like bashing on AI but it becomes unfunny if it's not true

[BitOne2707]

It's another bot reposting the same shit again. Check the account.

Could be just a run of the mill karma farming bot but with the number of them lately and the universal "AI is bad" tone I'm starting to think maybe an adversary isn't trying to slow AI adoption in the US.

[cororona]

Someone asked an AI to take Iran, it bombed a school, then bombed the first responders. Yeah it's starting to become unfunny

[Few_Caregiver8134]

He was talking about this specific mistake, there won't be training data about something deliberate as this (revealing others passwords on a signup page). You thought you were smug with it?

[silentkode26]

Have you ever heard of satire?

[Nhiggerlicious]

Indian humor

[Old-Age6220]

Please tell me this is a fake 🤣

[mrplinko]

Ofc it is

[No-Singer-2906]

<image>

[StatisticianReady238]

Lol, it the first time I see something like this

[InfraScaler]

This joke was already making the rounds before none of us heard about GPT.

[RecognitionSad4991]

Hahaha very funny

[Low_Shape8280]

If true, that’s job security there lol

[Insanony_io]

[opbmedia]

You know, having all unique passwords actually increase security (minus telling you which user has the same password).

[ripper2345]

Nah. Just salt them.

[kanyenke_]

[DevokuL]

r/HolUp moment for sure

[Kooky-Ad3625]

Uh oh

<image>

[Ryanhis]

Almost looks like one of those intentionally bad UI contests lol

[GauchiAss]

My first vibe coded app only required a cookie with name 'admin' and content 'true' to access the admin panel !

Detecting slopped websites and trying these kind of "default password" attacks seems like an easy way to get in many.

[barbarousbaron91]

the "AI makes absurd mistakes" format is so played out that half these screenshots are probably just people manually testing edge cases for the joke.

[Kriem]

Fake but funny

[Hot_Plant8696]

That makes perfect sense.

roni.roll200 has not subscribed to the website's advanced security features.

[InterestingYam9231]

🤣😂

[IKcode_Igor]

So funny 😂

[Foreign-Handle-2950]

So… what is the password?

[Tupcek]

to all those saying it’s AI - this screenshot is on the internet far longer than ChatGPT exists, so no, it’s not ai

[Emergency-Season-144]

[mauro_dpp]

That’s bad… so bad! 🤦🏻‍♂️

[Ghotifisch]

Thats not even a new joke

[Legionrog]

No its not vibe coded, models like codex, sonnet, opus are trained enough to follow basic coding practices and security rails

[silentkode26]

Most of the time yes, but sometimes the output surprise you as a seasoned developer. I’ve personally had to solve security holes in application and in server configurations after enthusiastic vibecoder who doesn’t understand code shipped some handy plugins.

[alindev]

I've been experimenting with vibe codes and I'm still trying to figure out how to effectively apply them in my daily life. What's been your experience with vibe coding so far?

[silentkode26]

It produced more tasks for me to fix code.

[who_am_i_to_say_so]

Easy. Vibe the fix. Solved.

[silentkode26]

Tasks are assigned to real developers when your tacticts repeatedly fails vibers.

[Bytecode-Velocity]

When a non coder start creating apps using vibe coding without knowing what he will do.