Vibe coding is just like passing all your coding tasks off to that friend who’s been doing coding as a hobby for the last four months.
Security
A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.
Rules :
- All instance-wide rules apply.
- Keep it totally legal.
- Remember the human, be civil.
- Be helpful, don't be rude.
Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient
Who would have thought letting an AI shit out slop code would produce insecure, slop code? I'm shocked, I tell you. Shocked.
Just keep giving it more prompts and editing the output until the squiggles go away and it runs. It will be just fine, surely.
Vibe coding = VaaS, Vulnerabilities as a Service.
Vibecoding without git (so you can revert back to a last working version) is like:
- Walking into a nightclub without condoms
- Trick bicycling without a seat
- Jumping out of a plane without a reserve chute
- ...
In Vibecoding you can let the AI do the git commits and reverts
Even classic coders doesn't automatically write safe and secure code.
Lol and hammers are terrible at setting screws. I appreciate the heck out of vibe coding a prototype and massaging it into place. It doesn't work well for security, polish, performance, heck most things really. Vibe coding only really replaced stack overflow lol