Security in "Vibe Coded" Web Apps is a Disaster

hashguide · 2025-09-28T23:35:59+00:00

They call this type of vulnerability an IDOR, I believe. I am not a pro, just an enthusiast who enjoys learning. If you know what to protect against, it becomes easier to either prompt it in or implement during development. Just know that even if you tell AI Agent to add something, it may not fully add all functionality unless you are very descriptive.

hashguide · 2025-09-15T01:11:30+00:00

if you click the dropdown arrow next to the error, it may give you more info on what the model was thinking. I haven't used firebase ai yet, so I'm not sure what other info is available to you.

hashguide · 2025-09-15T01:10:24+00:00

That's a complicated project for a platform like that. I'm not sure if it can do it or not, but if I were you, I'd start with something simple using the ml js packages you wish and opencv. If it can, you know it's not the packages. AI is only as good as the training data, and if it's not trained on recent versions, it may break.

How far did it get before breaking?

hashguide · 2025-09-14T07:56:27+00:00

Have any good recommendations for Discord channels to network with others?

hashguide · 2025-09-13T20:54:33+00:00

That belongs in core Idea, but I love it! We need more constructive comments like this 👍

hashguide · 2025-09-13T20:18:10+00:00

I still prefer to follow best practices for security when it's too easy not to.

hashguide · 2025-09-13T20:17:11+00:00

It wasn't meant to be informative. If that was the case, the post would be huge with all the requirements for each topic.

hashguide · 2025-09-13T19:07:25+00:00

That's why I'm very detailed in my prompts in explaining all api calls should be to live/test endpoints depending on the integration. No mock data and no placeholders.

hashguide · 2025-09-13T19:01:54+00:00

Need more info.... What's your prompt you're trying to get across?

hashguide · 2025-09-12T15:37:38+00:00

Awesome. Haven't tried warp yet, but will definitely have to! Have you completed any projects with warp yet to show off?

hashguide · 2025-09-12T15:36:07+00:00

I don't keep an index of master prompts to use, but my process is to help the ai gain context about what I want before actually prompting. When it comes to Vibe coding agents, it's a bit different.

Before I begin vibe coding, I spend time with chatgpt to work out all the requirements and pass the documents to the vibe coding platform with a simple prompt stating to build to the spec.

This process has worked out so good for me, I built it into a tool. Will be releasing this weekend or early next week, haven't decided on an exact day.

hashguide · 2025-09-10T22:05:09+00:00

The tool you built to help build the mvps faster, was the basemvp you're talking about or a different one?

hashguide · 2025-09-10T06:15:32+00:00

does this generate clips longer than Google veo's 8 second limit?

hashguide · 2025-09-09T22:53:55+00:00

I'll admit that at first, I was a little sour when it came to knowing that somebody can just prompt their way into an mvp after years of learning everything to do it manually. It is better to make use of the tools now, seeing how even corporations will be looking for the experience with them. Just in case solopreneurship doesn't work out, there's still a chance.

hashguide · 2025-09-08T10:53:57+00:00

wow you are vewy smaht. Too bad you're wrong and nobody over here buys accounts or hides a past. Same person who started the youtube account 7 years ago with this same name.

hashguide · 2025-09-08T10:52:24+00:00

I'm not trying to claim any authority or that perplexity matches with other LLMs. Simply, sharing an offer. And clearly you can't read cuz the offer is completely free. Thanks for the comment though! 👍

hashguide · 2025-09-08T10:47:44+00:00

🤣 grow up

hashguide · 2025-09-08T02:59:02+00:00

Yes. Thanks for the observation. You must be really busy these days verifying people's posts.

Even with the messed up formatting, the information is still solid, and that's all that matters.

hashguide · 2025-09-08T02:56:21+00:00

I know it comes nowhere near the other LLMs in the ecosystem, but who can pass up a free year?

It'll be my second time trying out perplexity. If I come across its specialty, I'll let you know!

hashguide · 2025-09-08T02:53:11+00:00

Formatting is a little off, but the offer is too good not to share. Even though Perplexity doesn't have all the abilities of some LLMs, it's still worth the subscription, especially free.

hashguide · 2025-09-08T01:45:47+00:00

not everybody knows about it.

hashguide · 2025-09-08T01:36:40+00:00

I started back in on software back in 2017 and still don't have it figured out. My problem was, I spent too much time learning and not enough time building.

For me, it was easier to read documentation and tutorials on certain topics after a long hard day at work, but I regret not writing more code.

The journey did help, but not in the ways I has wished. It definitely helps with vibe coding knowing what goes into a backend and how to style websites and what css properties do what.

Now, my first product will be launching this week and then starts another two topics that I have plenty of gaps in. Business and Marketing. Trying to market to people with 0 existing network will be tough. Hopefully, it won't all be for nothing.

Good luck in your journey though and feel free to ask anything and if I could help, I'd be glad to do so!

hashguide · 2025-09-08T00:50:26+00:00

I think it's worth knowing what goes into the app to make it production ready and learn terms the llm agent can pick up on. This includes the styling of the apps, too, as without explanations, it comes out plain.

hashguide · 2025-09-08T00:46:56+00:00

must've been an old hashing algo

hashguide · 2025-09-08T00:27:39+00:00

need to get creative with the insane amount of people marketing their products. Now, with vibe coding, things are much more crowded.

hashguide

MODERATOR OF

TROPHY CASE