Comment on Drop your unpopular opinions here because c/unpopularopinions is filled with popular opinions
stopforgettingit@lemmy.world 15 hours agoThere have been a number of
vibe codedphp websites that were just sitting open for anyone to look at the personal information, because no one who knew what they were doing was involved.
Re-wrote this for you for 2010.
Just saying, the web has been like this forever. The only thing AI is changing about people building insecure websites that that they look like someone talked to a designer before it went up.
KairuByte@lemmy.dbzer0.com 11 hours ago
No, that’s quite different. PHP is a language, any language can be made secure so long as it isn’t running client side.
This is like saying PHP and a script kiddy are equivalent.
stopforgettingit@lemmy.world 10 hours ago
I am using PHP as a metaphor. Like, even a script kiddie could get up a working PHP site and it doesn’t matter how spaghetti the code is - it will still run.
Even a vibe coded site can be secured, the language doesn’t matter. Shitty sites with terrible security have always and will always exist on the web. AI didn’t start this trend and we should not pretend like web development has been like this for years.
KairuByte@lemmy.dbzer0.com 8 hours ago
AI didn’t start the trend but it has pushed that change to an extreme. A user who has no concept of security can sling up a nice, polished-looking application and publish it to the web. That was always “possible” but the bar needed to get to the point of publishing was higher, so the chances of pushing insecure code was lower.
The number of “developers” who literally don’t know how their application works is staggering. I have seen people literally say “I don’t know how it works” of their own project, and that should be terrifying for published code.
Again, for small diy things it’s whatever. But as a project released into the wild it is, at least currently, irresponsible.