Ask HN: Are you hesitant to install vibe-coded apps?

6•ex-aws-dude•1h ago

The thing is in the past there can be supply chain attacks but when its an actual programmer creating the software there is at least a chance for them to notice if something is up.

But if the app is not even created by a programmer whats stopping prompt injection from including some virus in the app?

Aren't we completely blind to security issues at that point?

Comments

fodkodrasz•1h ago

No. I simply don't (apart from company mandated ones like Claude Code), or do it in isolated VMs.

timpera•1h ago

At this point, I always ask my AI tool of choice to audit the Github before installing an open-source tool, so I'm not that concerned about security.

I'm mostly hesitant to install vibe-coded apps because they sadly tend to be shiny but quickly-abandoned slop, with tons of bugs or performance issues.

Ask HN: Are you hesitant to install vibe-coded apps?

Ask HN: Any way to remove ads in Apple apps?

Ask HN: Do you want a router that has DD-WRT pre-installed?

Ask HN: Many SWEngs out there are considering re-training

Ask HN: Where has creativity in software gone?

Domain Health

Tell HN: GitHub refuses to remove cracked copies of my software after a month

Tell HN: I've been paying for a rural Tanzanian's education for 10 years

Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?

Ask HN: CAD for wood working with LLM support?

Ask HN: What do you think will be hot in 2027 with on-device AI

Free and Open-Source Facebook Scraper – Lightweight, No Headless Browser

Ask HN: How long before someone reverse-engineers Windows?

Tell HN: ChatGPT on macOS grants local computer access to cloud account

Ask HN: How do you review code nowadays?

JNISleuth-MCP – Recover Stripped JNI Bindings and Ollvm Branches for Ghidra/Ida

Ask HN: Anyone using Jev / other decision models? What for?

Ask HN: Why do people say "I built it" when we should say "Claude built it"?

Ask HN: Could you find funding if you didn't want to build a $1-10B business?

Ask HN: What to Build in the AI Era?

Ask HN: Are you hesitant to install vibe-coded apps?

Comments

Ask HN: Are you hesitant to install vibe-coded apps?

Ask HN: Any way to remove ads in Apple apps?

Ask HN: Do you want a router that has DD-WRT pre-installed?

Ask HN: Many SWEngs out there are considering re-training

Ask HN: Where has creativity in software gone?

Domain Health

Tell HN: GitHub refuses to remove cracked copies of my software after a month

Tell HN: I've been paying for a rural Tanzanian's education for 10 years

Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?

Ask HN: CAD for wood working with LLM support?

Ask HN: What do you think will be hot in 2027 with on-device AI

Free and Open-Source Facebook Scraper – Lightweight, No Headless Browser

Ask HN: How long before someone reverse-engineers Windows?

Tell HN: ChatGPT on macOS grants local computer access to cloud account

Ask HN: How do you review code nowadays?

JNISleuth-MCP – Recover Stripped JNI Bindings and Ollvm Branches for Ghidra/Ida

Ask HN: Anyone using Jev / other decision models? What for?

Ask HN: Why do people say "I built it" when we should say "Claude built it"?

Ask HN: Could you find funding if you didn't want to build a $1-10B business?

Ask HN: What to Build in the AI Era?