There have been a number of vibe coded php websites that were just sitting open for anyone to look at the personal information, because no one who knew what they were doing was involved.
Re-wrote this for you for 2016.
Just saying, the web has been like this forever. The only thing AI is changing about people building insecure websites with shit code that that they look like someone talked to a designer for 10 seconds before it went up.
I am using PHP as a metaphor. Like, even a script kiddie could get up a working PHP site and it doesn’t matter how spaghetti the code is - it will still run.
Even a vibe coded site can be secured, the language doesn’t matter. Shitty sites with terrible security have always and will always exist on the web. AI didn’t start this trend and we should not pretend like web development has been like this for years.
AI didn’t start the trend but it has pushed that change to an extreme. A user who has no concept of security can sling up a nice, polished-looking application and publish it to the web. That was always “possible” but the bar needed to get to the point of publishing was higher, so the chances of pushing insecure code was lower.
The number of “developers” who literally don’t know how their application works is staggering. I have seen people literally say “I don’t know how it works” of their own project, and that should be terrifying for published code.
Again, for small diy things it’s whatever. But as a project released into the wild it is, at least currently, irresponsible.
Re-wrote this for you for 2016.
Just saying, the web has been like this forever. The only thing AI is changing about people building insecure websites with shit code that that they look like someone talked to a designer for 10 seconds before it went up.
No, that’s quite different. PHP is a language, any language can be made secure so long as it isn’t running client side.
This is like saying PHP and a script kiddy are equivalent.
I am using PHP as a metaphor. Like, even a script kiddie could get up a working PHP site and it doesn’t matter how spaghetti the code is - it will still run.
Even a vibe coded site can be secured, the language doesn’t matter. Shitty sites with terrible security have always and will always exist on the web. AI didn’t start this trend and we should not pretend like web development has been like this for years.
AI didn’t start the trend but it has pushed that change to an extreme. A user who has no concept of security can sling up a nice, polished-looking application and publish it to the web. That was always “possible” but the bar needed to get to the point of publishing was higher, so the chances of pushing insecure code was lower.
The number of “developers” who literally don’t know how their application works is staggering. I have seen people literally say “I don’t know how it works” of their own project, and that should be terrifying for published code.
Again, for small diy things it’s whatever. But as a project released into the wild it is, at least currently, irresponsible.