Overshot — find the TikToks breaking out, and what they're selling

Loading video…

Securitymaxxing knowledge (vibecode edition), let's see if your app is actually secure or just AI slop waiting to get hacked.

@millee.md

2.1K followers · usually 1.9K views a post

Views

90.7K

Likes

5.8K

Comments

607

Why it worked

The video provides high-value, actionable technical advice in a fast-paced, 'vibecoding' format that appeals to developers, while the challenge at the end encourages comments and engagement.

Summary

The creator lists ten essential cybersecurity practices for software developers to secure their applications. He challenges viewers to count how many of these practices their own apps currently implement.

Structure

1Introduction to security best practices
2Rapid-fire list of 10 security checks
3Visual demonstration of each security concept
4Call to action for viewer engagement

Call to action

Comment how many of these your app has below

On-screen text

Securitymaxxing knowledge (vibecode edition) Rate Limiting Stripe API keys diagram Fact Payroll table When To Avoid Environment Variables? Don't Trust User Inputs Products database schema Frontend Route Protection Flow Server Error stack trace Debug/Admin endpoint diagram Logging diagram

Transcript

You have rate limiting on your API. Your API keys and secrets are on your server side. You have role-level security on every table. Your environment variables aren't committed to your repo. You're validating and sanitizing user input. Your database doesn't have a single table left fully public by default. You have authentication on your protected routes. Your error messages don't leak stack traces to the user. You've turned off or locked down any admin or debug endpoints. You have logging so you'd know even if somebody was attacking you. Comment how many of these your app has below and if it's under five, you've got work to do tonight.