3 ms·
So the UI can check if what they enter is correct. It’s very sensible and an obvious solution if you don’t think about the security of it. A dating app is one
by MBCook 1y ago
So the UI can check if what they enter is correct.
It’s very sensible and an obvious solution if you don’t think about the security of it.
A dating app is one of the most dangerous kinds of app to make due to all the necessary PII. this is horrible.
- ryanisnan 1y ago> if you don’t think about the security of it. This is big brain energy. Why bother needing to make yet another round trip request when you can just defer that nonsense to the client!
- joelhaasnoot 1y agoNo one would ever hack my app!
- pydry 1y agoSmacks of vibe coding
- bitbasher 1y agoI don't think a language model is that stupid. This smacks of pure human stupidity and/or offshoring.
- orphea 1y agoBut LLMs are that stupid. Do you remember that guy who vibe coded a cheating tool for interviews and who literally leaked all his api keys/secrets to GitHub because neither him nor a LLM didn't know better?
- MBCook 1y agoCould be. Somewhere else in these comments someone was saying they found evidence that the app was coded that way. But they also said it was a project by two students. And I could absolutely see students (or even normal developers) who aren’t used to thinking about security make that mistake. It is a very obvious way to implement it. In retrospect I know that my senior project had some giant security issues. There were more things to look out for than I knew about at that time.
- benmmurphy 1y agoI’ve seen banks where the OTP code is generated on the client and then sent to the server.