There's a wall of shame for vibe coded apps.

@itsthatlady.dev

29.0K followers · usually 1.5K views a post

Views

47.7K

Likes

4.1K

Comments

41

Shares

798

SoundTikTok sound · original sound - itsthatlady.dev

Promoted product

VibeFactory.aivibefactory.ai

Connect a Google Sheet and get a live dashboard that shows your current data on every load. Or upload an Excel or CSV file for an instant one-off dashboard. AI builds charts, KPIs, and tables in under 60 seconds.

Why it worked

The video leverages a trending, fear-based topic (AI security failures) to provide high-value, actionable advice, making the product feel like a necessary utility rather than an ad.

Summary

The creator discusses the security risks of 'vibe-coded' apps that rely too heavily on AI without proper testing. She provides three simple security checks to help developers avoid common vulnerabilities.

Structure

1Introduction to the 'Wall of Shame' for insecure apps
2Explaining the danger of over-reliance on AI for coding
3Providing three actionable security testing steps
4

Original caption

There's a Wall of Shame for vibe-coded apps and it just went viral on Hacker News. Exposed user data. Passwords stored in plain text. URL bar account takeovers. The scary part? Every single one of those devs thought their app was secure. The Coding Agent said it was fine. So they shipped. Here's how you make sure that's never you: 🔍 Search your entire codebase for any API key or secret that isn't in an environment variable. 🔓 Try to access every page and endpoint without being logged in. ⚡ Drop a single quote into every input field and watch what happens. That's it. That catches 90% of what's on that list. Don't be on it. #vibecoding #ai #saas

More from @itsthatlady.dev

Product placement

VibeFactory.ai is shown as the primary tool for the first security check, with its interface clearly visible on screen.

On-screen text

THERE'S A WALL OF SHAME FOR VIBE CODED APPS IT WENT VIRAL ON HACKER NEWS APPS THAT EXPOSE EVERY USER'S DATA APPS WHERE YOU CAN LITERALLY ACCESS SOMEONE ELSE'S ACCOUNT FROM THE URL BAR APPS THAT STORE PASSWORDS IN PLAIN TEXT 3 MINUTES 5 MINUTES EACH 1 SEARCH YOUR ENTIRE CODEBASE FOR ANY API KEY OR SECRET THAT'S NOT IN AN ENV FILE 2 TRY TO ACCESS EVERY PAGE AND EVERY ENDPOINT WITHOUT BEING LOGGED IN 3 PUT A SINGLE QUOTE IN EVERY INPUT FIELD AND SEE WHAT HAPPENS 90% OF THAT WALL OF SHAME DIDN'T DON'T BE ON THAT LIST PLEASE

Transcript

There's a wall of shame for vibe coded apps. It went viral on Hacker News recently and some of these are bad. Apps that expose every user's data. Apps where you can literally access someone else's account from the URL bar. Apps that store passwords in plain text. And the part that messes me up is that people who built these didn't know. They shipped thinking everything was fine because the AI told them that it was fine. And I keep thinking that could be you right now. So here's how you never end up on that list. Three checks, five minutes each. One, search your entire codebase for any API key or secret that's not in an ENV file. Two, try to access every page and every endpoint without being logged in. Three, put a single quote in every input field and see what happens. And that's it. That catches what 90% of that wall of shame didn't. Don't be on that list, please.