South African coffee franchise exposes company and private data in vibe-coded web application

Soon AI will give people the confidence to conduct complex medical procedures on themselves - isn't that great ! No need to pay high surgeon and hospital bills any longer.
 
My_King said:
Can't wait for the SA digital ID
Click to expand...
the one case where vibe coding probably would me more secure than the version that will be in place, over budget, crashes every minute or two, and which cannot handle more than 3 visitors per minute. but it will be doing the needful for the ones harvesting all the data to sell on the dark web.
 
Pythonista said:
Soon AI will give people the confidence to conduct complex medical procedures on themselves - isn't that great ! No need to pay high surgeon and hospital bills any longer.
Click to expand...

That isn't a problem, it is a self solving solution. The problem is when ai trained doctors conduct medical procedures on other people.
 
The vibe coding isn’t really the issue here, the deployment by someone who knows nothing about deployment and public hosting is really where the problem lies.

The app could happily have been vibe coded all the way as long as it was deployed by someone who had half a brain.

And should never have been public to start with.
 
Last edited:
More AI Stupidity! People and Companies should be held responsible if AI generated code exposes personal information since it is pure negligence to play fast and loose with information that should be private!
 
SauRoNZA said:
The vibe coding isn’t really the issue here, the deployment by someone who knows nothing about deployment and public hosting is really where the problem lies.

The app could happily have been vibe coded all the way as long as it was deployed by someone who had half a brain.

And should never have been public to start with.
Click to expand...
This is the only sane response here. Having a "professional company" develop an app by putting the "intern" on it is even more dangerous. Do proper security reviews and its all fine.
 
mpdjhb said:
This is the only sane response here. Having a "professional company" develop an app by putting the "intern" on it is even more dangerous. Do proper security reviews and its all fine.
Click to expand...

Security reviews and stuff take time and vibe coding is like fast bro.
 
mpdjhb said:
This is the only sane response here. Having a "professional company" develop an app by putting the "intern" on it is even more dangerous. Do proper security reviews and its all fine.
Click to expand...

I mean if this was simply kept internal it would already reduce the risk by like 500%.

There are ways and means to do this stuff even with bad vibe code behind it that will still make it safe enough for internal use.

So sure let the CEO vibe code and go nuts, there’s probably some value in the results and the cost offset makes it worth it, but then just have someone who understands this stuff deploy it.

Doesn’t need to cost millions or have a full security review, just tick some very simple boxes to make it safe enough.

First thing that comes to mind would be something like hosting it behind Cloudflare Access or similar tech.
 
Security landscape is changing... we're going to be using AI to find AI coded vulnerabilities lol :p
 
6 weeks later, 50+ Claude enterprise accounts floating around and a constant “can i get more tokens” murmur in the office… we are well on our way. And i am BLOWN away by what my team has pulled together… in 6 short weeks i can honestly say peoples lives have changed, and operations will never be the same.
Click to expand...

GOOD GRIEF... I wonder how much bigger their exposure is besides the current stuff that got leaked?

I wonder how he'd take it if I sent him my blog post I wrote a while ago and asked "want me to stroll through your village and check it out?"...

OrganiCode | Blog - Everyone in your business is building software now

AI has not destroyed development jobs (yet), it has changed them. What happens when staff build their own tools with an LLM, why they are often right to, and who carries the POPIA risk when nobody owns the result.
organicode.co.za organicode.co.za
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X