This is why you shouldn't trust vibe coded apps

@securedbycasco

4.7K followers · usually 2.5K views a post

Views

298.6K

Likes

13.4K

Comments

96

Shares

691

Promoted product

Cascocasco.ai

4 videos

Why it worked

The video leverages a high-stakes, relatable fear (data breaches in 'vibe coded' apps) and provides immediate, actionable technical value, establishing the creator's authority while subtly positioning their firm as the expert solution.

Summary

A cybersecurity expert explains the risks of 'vibe coded' apps by demonstrating how Insecure Direct Object Reference (IDOR) vulnerabilities allow unauthorized data access. He then outlines the proper logout procedures developers should implement to prevent session-based security breaches.

Free account

Transcript, structure and on-screen text

5 beats, a 257-word transcript and 35 lines of on-screen text — the parts you need to write your own version.

Original caption

Can someone steal your users' data just by pasting a URL? If your app doesn't check who's asking for that data, then yes. In this one I break down one of the most common vulnerabilities we find at Casco: Insecure Direct Object Reference, or IDOR. Change a single ID in a URL, and a broken app will hand over someone else's private data. If you're vibe coding an app right now, watch this before you ship it. #cybersecurity #vibecoding #softwareengineering #startup