Comment

Comment on Privacy disaster as LGBTQ+ and BDSM dating apps leak private photos.

Do you reckon this app could have been vibecoded/a product of AI? Or massive use of AI in development? I’d know not to do this as a teenager when I was beginning to tinker with making apps, nevermind an actual business.

source

Sort:hotnew top

taladar@sh.itjust.works ⁨1⁩ ⁨week⁩ ago
I know for a fact that a lot of applications made these mistakes before AI was around so while AI is a possibility it is absolutely not necessary.

source
- yoshman@lemmy.world ⁨1⁩ ⁨week⁩ ago
  I had a test engineer demand an admin password be admin/admin in production. I said absolutely not and had one of my team members change it to a 64-character password generated in a password manager. Dumbass immediately logs in and changes it to admin again. We found out when part of the pipeline broke.
  
  So, we generated another new one, and he immediately changed it back to admin again. We were waiting for it the second time and immediately called him out on the next stand-up. He said he needs it to be admin so he doesn’t have to change his scripts. picard_facepalm.jpg
  
  source
  - Serinus@lemmy.world ⁨1⁩ ⁨week⁩ ago
    How is he not fired? Incompetence and ignorance is one thing, but when you combine it with effectively insubordination… well, you better be right. And he is not.
    
    source
    Pika@sh.itjust.works ⁨1⁩ ⁨week⁩ ago
    Firmly agree, I don’t believe he should have had access to change these password in the first place unless I’m misunderstanding their definition of test engineer, but if OP had the authority and permission to change the password in the first place, and that person deliberately changed it back to the insecure route again, there would some sort of reprimandment involved
    
    source
    -> View More Comments
    yoshman@lemmy.world ⁨1⁩ ⁨week⁩ ago
    He was a subcontractor, so technically, he’s not our employee.
    
    I bubbled it up the chain on our side, and it hasn’t happened since.
    
    source
  - Pika@sh.itjust.works ⁨1⁩ ⁨week⁩ ago
    my main question in this is, why does a test engineer have the credentials to change an admin password in production. Like I get that he needs to test things but I doubt he needs access to changing profile/account settings
    
    source
    yoshman@lemmy.world ⁨1⁩ ⁨week⁩ ago
    He had to do admin functionality regression tests before prod releases to make sure nothing broke.
    
    The system uses SSO for logins for everything else.
    
    He is a subcontractor who was using scripts for all his projects. I told him he really needs to use env vars for creds.
    
    source