4 ms·
People are using LLMs to generate apps and it's easy for non-technical people to miss this stuff. The blog post mentions https://lovable.dev/ https://lovable.de
by dmix 10mo ago
People are using LLMs to generate apps and it's easy for non-technical people to miss this stuff. The blog post mentions https://lovable.dev/ https://lovable.dev/ becoming a $300M company, which uses Supabase by default and basically generates React SPA's with no true backend. But random people won't understand this distinction and will want to create full real apps. Doing this serverless is tricky and requires a lot of careful thought to do right.
Lovable is not going to tell them to use a proper auth service or fully secure their data. One Lovable project I looked at had generated an entire custom JS Markdown parser instead of using react-markdown, for example.
- zamadatix 10mo ago> The blog post mentions https://lovable.dev/ https://lovable.dev/ becoming a $300B company I had to double take back to the article after reading this - it actually said $330M (raised at $6.6B valuation). AI investment has been crazy enough I would have actually believed it though!
- dmix 10mo agoFixed, thanks
- satvikpendem 10mo agoI don't think you did fix it, you say "becoming a $300M company" but it's actually a $6.6B company, for which we'd be looking at valuation not amount raised.
- jeroenhd 10mo agoLLMs can and often do turn any technology into an insecure heap of shit. I don't see how that's relevant to Supabase specifically.
- _puk 10mo agoBoth the free and paid tiers of lovable don't charge for security fixes, and before you can publish it requests you run security audits. I've found doing this, and regularly asking "did you just make my system massively insecure" help keep it on its toes. That said, I've seen a few "look what I just made.." that caused a double take.
- cess11 10mo agoNow, "non-technical people" should not ever by themselves put anything on the Internet that handles things like names and passwords. It's bad that some folks want to make money on such people doing it anyway, which means they're not very nice and should get help to correct their ways.
- vrosas 10mo agoI asked claude to build a system that involved parsing some dates and addresses and rather than using a library it wrote hundreds of lines of regexes and term lists ('st', 'street', 'dr', 'drive', 'ave', etc) to match every test case I gave it. Lesson learned.
- DANmode 10mo agoWhat was the lesson, to ask it to use a library, if that’s what you intend for your codebase? Assume LLMs and AI products are a rockstar junior dev until proven otherwise. Act accordingly!
- iamsaitam 10mo agoWhy should we care about what non-technical people do wrong in a technical domain?