←back to thread

Critical vulnerability in AI coding platform Base44 allowing unauthorized access

(www.wiz.io)
122 points waldopat | 1 comments | 30 Jul 25 16:12 UTC | HN request time: 0.201s | source
Show context
zamalek ◴[30 Jul 25 17:09 UTC] No.44736778[source]▶
Hot on the wheels on the vibe-coded Tea breach. Things are looking great for vibe coding.

Don't get me wrong, I have been been more hands off (though not completely, and very prescriptive) with an SPA side project and it's going great. Claude makes way better looking UIs than my dog ugly developer UIs. But vibing auth? That should seriously count as _legal_ gross negligence.

replies(5): >>44736996 #>>44737543 #>>44737655 #>>44738035 #>>44738150 #
sunaookami ◴[30 Jul 25 18:45 UTC] No.44738035[source]▶
The Tea breach was not due to vibe-coding btw, the code was from the beginning of 2024 when vibe coding wasn't even possible.
replies(4): >>44739256 #>>44740066 #>>44740077 #>>44741548 #
dingnuts ◴[30 Jul 25 22:07 UTC] No.44740066[source]▶
By Karpathy's definition it still isn't possible. But I've definitely been hearing about AI generated code being just as good as my code since 2022.

Don't gaslight us about timelines. The boosters have been telling us amateurs can code and we're all worthless for three and a half years now.

When ChatGPT was launched, they said we'd all be on the streets by now.

What I don't understand is the gleeful receipt of that news by some programmers

replies(2): >>44740135 #>>44740926 #
1. janalsncm ◴[30 Jul 25 23:54 UTC] No.44740926[source]▶
Pretty much. We are almost four years into “LLMs will make SWEs obsolete in 6 months” now. Turns out, most tools that let amateurs write bad code let pros write better code.