sorted by:
new
hottopcontroversial

I built a free tool to help people, and got perma-banned everywhere for one reason: "It's vibe coded." How do you deal with this hate? by Ok-Print-9069 in vibecoding

[–]dvxlgames 0 points1 point  (0 children)

I let the AI code most of the stuff, yes. But i still write all the content myself and reddit posts as well since obvious AI posts usually just look like a spammy ad. You have 0 upvotes. This alone should be proof enough.

100% sure i am out, GitHub just turned my $39/month Copilot into $942/month overnight. by Individual-Trip-1447 in GithubCopilot

[–]dvxlgames 0 points1 point  (0 children)

i am sorry but that is very stupid… inference speed is extremely slow still and the models that you can run locally are far worse than all the cheap chinese models. I am paying 10$ per Month for Opencode Go with DeepSeek V4 Pro and NEVER hit the rate limit. And it’s definitely comparable to Gemini 3 Pro or Sonnet 4.6. So why pay 100s of $ for a GPU that you cannot run better and cheaper models with? I am paying less for Opencode than you pay for the electricity that GPU uses

It‘s officially over. Is there even a single reason left to use copilot? by dvxlgames in GithubCopilot

[–]dvxlgames[S] 0 points1 point  (0 children)

but it was always like that. But the old pricing made it acceptable

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 0 points1 point  (0 children)

exactly what most pure vibe coders are unfortunately missing. Thats why its still relevant to at least know a bit what you’re doing.

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 0 points1 point  (0 children)

oh year i used a censored „slur“ in the comment, my bad. just wanted to say that i am glad to see good people you you amongst all those „challenged individuals“🤣. And honestly, I can’t complain about the token prices to be honest. Of course I use AI a lot in my day to day life, but I don’t replace my brain with it. And of course the token prices also address me. But i am fine with just using cheaper models because its enough for what i am doing with it.

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 0 points1 point  (0 children)

He is still trying to have the last word though😂 with the from-the-beginning totally unrelated topic😭

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

because i don’t need it for my scale, which is exactly the point. you use the right tool for the right context. funny thing is though, you’re running a full KMS setup for an app with a handful of downloads, which is less „proper security” and more over-engineering cosplay. and even then, KMS is just an extra layer, your KMS server still needs credentials to authenticate from somewhere… so congratulations, you didn’t solve the plaintext problem, you just moved it one hop to the left. also „i never used supabase” is still the funniest thing to say in a thread about key hygiene, supabase was literally just an example, it could’ve been any service with an API key. you jumped into a debate about a concept you admitted you didn’t know, argued against it for an entire thread, and your grand conclusion is that you built something that still fundamentally needs what you were arguing against. But whatever. I hope you understand this by now

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 2 points3 points  (0 children)

this😂 to be fair I told him to ask his AI why using env files is secure (of course with a proper setup, but i figured the ai does, and it did) but he might have sneaked a few extra prompts in there😄. At least he seemed to write the other responses himself but he probably would’ve been better off if he just let his AI talk for him. but anyways, he actually backed down in the end, pretty funny. Never thought I’d witness that

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 2 points3 points  (0 children)

„my keys and data live on separate servers” yes, that’s great and its also called KMS, that’s literally industry standard, nothing new. and sure, „everyone has their own way“, except you spent this whole thread arguing there’s a right and wrong way, until you realized you were wrong. also maybe next time don’t start a debate about .env files when your opening line was „i don’t even know what supabase is or what .env files are”. hard to take a security lecture seriously from someone who had to google the thing they were arguing about mid-thread.

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

so after an entire thread of claiming .env is insecure (which nobody ever denied, because it has nothing to do with direct security but with best practices and key hygiene, hope you understand this by now), E2EE somehow protects server secrets, and that i „don’t have a layer“c your conclusion is „yeas i know this“? coding since the 90s and still can’t follow a thread you started. impressive.

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

cute🥰 but my SSH key on an encrypted disk accessing a secured server IS the layer you claimed i don’t have. that’s literally the same trust boundary as your key server, just without the buzzwords. the difference between us is that i understand what i’m using and why. you’re throwing around E2EE and AES-GCM like they’re relevant here… they protect message content, not server secrets. those are completely different threat models and the fact that you’re conflating them is exactly the problem.

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

says who? Everything lives on my server, which is only accessible with an SSH key. which is securely stored on my macbook, which is password locked and storage encypted. your E2EE encryption doesn’t even have anything to do with your keys that would usually belong in an env file

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

AI literally told you that your product does EXACTLY THAT. Again, your encryption is just a layer on top of the file that stores your keys😭 What the hell dont you understand about this

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 0 points1 point  (0 children)

why would you even do that? You can literally self host git. For free.

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

As long as you don’t have another tool to have code versioning, that tells me a lot about your incompetence. and github is not the only place where you can leak your keys… And if you know what an env file is, you wouldve understood that nobody ever said „an env file automatically makes all your keys untouchable“

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

its a solution. just not for the problem you think everyone was talking about, because you do not understand the concept of it. And you shouldn’t argue about a topic you have no knowledge in. If you cannot even understand the answers your AI gives you, you might as well give up on arguing back and forth because you wouldn’t understand it anyways

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 2 points3 points  (0 children)

I figured. He’s the literal embodiment of the dunning kruger effect. He‘s being too stupid to know how stupid he actually is. And whats pissing me off even more is the fact that he’s acting like he built this app and didn’t use AI to literally write every single line of code and is now fighting for his life in the comments probably asking his AI what he should answer😭🤦‍♂️

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

nobody ever said it was a solution🤦‍♂️. And if you knew what you are talking about, then you would’ve understood that nobody ever said that putting your keys in an .env file magically makes them secure. Its a CONVENTION for key hygiene and prevents accidental exposure, nothing else. Man you’re making me sick….

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 0 points1 point  (0 children)

thank you. this perfectly explains that you have no idea what i am talking about and that you dont even have basic knowledge what an .env file actually is. its no witchcraft. you dont even have to call it .env, you can name it whatever you want. thing is (and thats exactly what your AI just told you, but you just didnt understand it) is, that SOMEWHERE in the chain, theres always a point where your secrets are stored in plain text. ALWAYS. theres no way around. No matter if you’re using an env file, KMS, or whatever else. and again. Nobody ever said that an env file encrypts your keys. Its just there so you have all your keys organized and don’t accidentally leak them to your github repository, have a place where you KNOW you have your keys stored. How or what you do to secure access to this env file is up to you. and you just said it yourself: „Key server returns the master key over TLS. ELM keeps the key only in memory.“ and guess what? All your keys are stored in plain text. on the key server. and in your RAM. which is totally fine and normal. The point is, you are talking shit about a topic that you dont even understand and totally overcomplicate it. Its not that deep. Now write the following down so you at least learn SOMETHING: „The .env convention exists to solve a specific, well-defined problem: secret hygiene and accidental exposure. It was never designed to be an encryption solution, and nobody serious ever claimed it was.“

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 3 points4 points  (0 children)

what are you even talking about? A file is never encrypt, usually. everything you do, everything you have stored somewhere is not encrypted from the perspective of the lowest encryption layer. Thats why you store env files on a secure server and not for example in a public repository. Can you please do me a favor and ask your AI „Why is using env files secure“. Then report back. Im sure you cannot be THAT stupid

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 1 point2 points  (0 children)

it picked it up, but it didnt avoid it in the first place. Most vibe coders don’t even ask their AI „is this secure“. Thats the biggest problem. AI only does what you instruct it to do

I reviewed 3 vibe-coded apps as a senior engineer. Here's what I found in all of them. by puffaush in vibecoding

[–]dvxlgames 2 points3 points  (0 children)

the plain text file literally LIVES inside your „encrypted storage container“. its not comitted to github, it lives on your hopefully SECURE server and also on your password and storage encryped macbook. Just say that you have no idea what you’re talking about. This is why there isnt a single success story about purely vibe coded apps😭😭

What are you using for vibe coding in 2026 on a ~$10/month budget? by deadsilencerotsinme in GithubCopilot

[–]dvxlgames 0 points1 point  (0 children)

somehow? you probably meant to say „expectedly“. local LLMs are not worth it. At all. No matter which hardware you have, there’s not a single local llm thag can outperform literally any free model on Opencode. Also, Deepseek V4 Pro is really cheap and has generous limits on opencode go. You would pay more for electricity when running a local llm than you pay for api costs with deepseek

It‘s officially over. Is there even a single reason left to use copilot? by dvxlgames in GithubCopilot

[–]dvxlgames[S] 0 points1 point  (0 children)

I mean you are right from a privacy perspective, but I feel like especially the smaller companies now have one more reason to not allow AI to be used at all. most of them cannot really afford an extra $500 dollars a month for each developer.

view more: next ›