[balls187]

I deffo get the “checked in AWS keys because I didn't understand what I was doing” vibe with the adoption of AI tooling.

I wonder if any AI coding tools will do similar things like curl rando scripts from the web and execute them.

[ljm]

I’ve spotted a few more subtle issues that would be unlikely to slip through code review, but can easily see a resurgence from vibe-coding and from a shift in early-stage hiring priorities towards career founding/‘product’ engineers.

It’s an easy tell for LLM-driven code because, to a seasoned engineer, it’ll always look like a strange solution to something, like handling auth or setting cookies or calling a database, that has been a done deal for a long time.

[AlexCoventry]

It seems inevitable that there are people trying to hack AI-coding services in order to get them to do exactly that.