I really hope OP also contacted their relevant national privacy authority, this is a giant violation
An AI Vibe Coding Horror Story
21–30 of 224 posts
Re: An AI Vibe Coding Horror Story
#22Avoid javascript like plague, it can be overwritten at the client side.
Re: An AI Vibe Coding Horror Story
#23Do you think if the agency hired a consultant to build this , a consultant couldn’t have made the same mistakes? Lack of security theater is a good thing for most businesses
It is physically possible for a consultant to write bad code. But you'd hope that a consultant could understand that medical data is extremely important to keep secure, and actually write it to have some level of security
Re: An AI Vibe Coding Horror Story
#24I did something similar to a local company here in Spain. Not medical, but a small insurance company. Believe it or not, yes, they vibecoded their CRM. I sent them an email and they threatened to sue me. I was a bit in shock from such dumb response, but I guess some people only learn the hard way, so I filed a report to the AEPD (Data protection agency in Spain) for starters, known to be brutal. I've also sent them a…
They should give you a chocolate at least.
I think that having paper documentation will be safer very soon :)
Re: An AI Vibe Coding Horror Story
#25This reads like internet fiction to me. Very vague and short.
[flagged]
Re: An AI Vibe Coding Horror Story
#26The only thing what helps is deleting the database. Every day. Until the thing goes down because the 'developer' thinks he has a bug that he can't find.
Re: An AI Vibe Coding Horror Story
#27This reads like internet fiction to me. Very vague and short.
Given the subject matter, it would be highly unethical to reveal the name of the company before verifying it was indeed fixed. I'd be wary of getting sued.
Re: An AI Vibe Coding Horror Story
#28Software engineering is looking more and more like it needs a professional body in each country, and accreditation and standards. Ie it needs to grow up and become like every other strand of engineering.
Gone should be the days of “I taught myself so now I can [design software in a professional setting / design a bridge in a professional setting].” I’m not advocating gatekeeping - if you want to build a small bridge at the end of your garden for personal use, go for it. If you want to build a bridge in your local town over a river, you’re gonna need professional accreditation. Same should be true for software engineering now.
Re: An AI Vibe Coding Horror Story
#29Anyone else read the title on HN and shudder not wanting to actually click it?
Re: An AI Vibe Coding Horror Story
#30Who should get jailed ?
Does the company which willingly sells the polymorphic virus editor bear any responsibility, or should the unaware vibe coder be incumbent ?