this post was submitted on 08 Aug 2025
440 points (85.3% liked)

Privacy

3530 readers
96 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 9 months ago
MODERATORS
 

TranscriptA post by [object Object] (@zzt@mas.to) saying: courtesy of @davidgerard@circumstances.run, Proton is now the only privacy vendor I know of that vibe codes its apps: In the single most damning thing I can say about Proton in 2025, the Proton GitHub repository has a “cursorrules” file. They’re vibe-coding their public systems. Much secure! I am once again begging anyone who will listen to get off of Proton as soon as reasonably possible, and to avoid their new (terrible) apps in any case. https://circumstances.run/@davidgerard/114961415946154957

It has a reply by the author saying: in an unsurprising update for those familiar with how Proton operates, they silently rewrote their monorepo’s history to purge .cursor and hide that they were vibe coding: https://github.com/ProtonMail/WebClients/tree/2a5e2ad4db0c84f39050bf2353c944a96d38e07f

given the utter lack of communication from Proton on this, I can only guess they’ve extracted .cursor into an external repository and continue to use it out of sight of the public

top 50 comments
sorted by: hot top controversial new old
[–] KiwiTB@lemmy.world 6 points 6 days ago (1 children)

They provide no evidence of vibe coding at all. Just because someone is using an IDE with AI (which is most now) doesn't prove anything.

[–] mikey@sh.itjust.works 1 points 6 days ago (1 children)

No one is using Cursor for the IDE feel; Cursor is just a VSCode without MS language servers and with extra AI. It's an objectively worse experience to use Cursor over VSCode, except if you vibe code.

[–] KiwiTB@lemmy.world 1 points 6 days ago

That's not exactly proof.

[–] JimVanDeventer@lemmy.world 4 points 6 days ago

If the evil didn’t convince people to abandon Proton, maybe a little bit of AI will. Amazing.

[–] galoisghost@aussie.zone 155 points 1 week ago (31 children)

Um, it’s a public repository. You can view the code that’s been added. Even if it IS AI generated, you can review it yourself.

I’m as anti-AI as anyone but this is misplaced AI-alarmism.

[–] homesweethomeMrL@lemmy.world 85 points 1 week ago (17 children)

Does anyone here actually review code?

[–] CrazyHorse@lemmy.cafe 241 points 1 week ago (2 children)

Only my own code and so far most of it has been unacceptable.

[–] Swedneck@discuss.tchncs.de 2 points 6 days ago

i once wrote a script to launch a program with specific flags that i think was mostly correct, it holds center place on my CV

[–] HakunaHafada@lemmy.dbzer0.com 47 points 1 week ago

Pure, unabashed honesty. I love it. 🫶

load more comments (16 replies)
load more comments (30 replies)
[–] panda_abyss@lemmy.ca 101 points 1 week ago (10 children)

I’d bet they just added it to their global .gitignore where it should be, then removed it because they didn’t want their private dot files committed to a public repo.

I don’t think this user knows much about git works. I don’t think this is nefarious or “vibe coding” as it’s colloquially known to be. It’s a bit much to describe all LLM use blindly as vibe coding, when vibe coding usually means just blanket accepting AI content.

load more comments (10 replies)
[–] Geometrinen_Gepardi@sopuli.xyz 63 points 1 week ago (18 children)

How is this proof of vibecoding?

load more comments (18 replies)
[–] daniskarma@lemmy.dbzer0.com 47 points 1 week ago (23 children)

Do you understand the difference between using AI assistance for coding and vibe code?

load more comments (23 replies)
[–] hanrahan@slrpnk.net 39 points 1 week ago (10 children)

And still no drive client for Linux..Fuck those guys :)

load more comments (10 replies)
[–] thesmokingman@programming.dev 39 points 1 week ago (4 children)

I’m annoyed because I had to go find a tree that actually had the cursor files. If there’s a smoking gun, you gotta fucking link it when you call someone out.

The irony of Proton attempting to remove it this way is that GitHub trees are permanently available. The only way to remove something once a link has been created is to delete the repo. I’d expect a security-minded company to understand that. To me that’s much more egg-on-face than vibe-coding secure applications. Neither is good; only one very explicitly highlights you don’t know shit about security.

load more comments (4 replies)
load more comments
view more: next ›