Ask HN: Are you hesitant to install vibe-coded apps? The thing is in the past there can be supply chain attacks but when its an actual programmer creating the software there is at least a chance for them to notice if something is up. But if the app is not even created by a programmer whats stopping prompt injection from including some virus in the app? Aren't we completely blind to security issues at that point? |
Also, why vibe coded apps are prone to have viruses, and non vibe coded apps are virus free and have perfect security?
If it's open source, you can check the code, vibe coded or not (I doubt the majority does).
If it's a commercial app, the developer(s) probably care more about making money than writing the "perfectly secure" app, vibe coded or not.
I'm mostly hesitant to install vibe-coded apps because they sadly tend to be shiny but quickly-abandoned slop, with tons of bugs or performance issues.
These sorts of pre ai github abandonware projects were usually quite leanly written, did a simple thing and that's it. Feature complete, and easy to build upon yourself if you wanted to take it further.