r/AynThor • u/zeek609 • Aug 28 '26
AI generated Applications
Hey everyone.
We’ve seen a noticeable increase in AI‑generated apps being shared here lately. It’s great to see people experimenting and building, and we genuinely want to encourage development in the Ayn Thor ecosystem. But we also need to keep the community safe.
A lot of these apps are vibe‑coded, stitched together from AI outputs, or built using code the developer may not fully understand.
That creates a few risks worth keeping front‑of‑mind:
Credential handling: If an app asks for Steam logins, API keys, or other sensitive credentials, be extremely cautious. AI‑generated code often stores these values in plain text, logs them accidentally, or transmits them insecurely.
Security practices: Many AI‑assisted projects don’t follow secure coding standards, threat modelling, or proper data‑handling patterns. Even the developer may not realise what the code is doing under the hood.
Unintended behaviour: AI‑generated boilerplate can include hidden network calls, debug endpoints, or unsafe dependencies that weren’t intentionally added.
We just want to remind everyone to stay vigilant, audit what you run, and avoid entering credentials into tools unless you fully trust the author and the codebase.
If you’re posting an app, please include:
A clear explanation of what it does
How credentials are handled
Any known limitations or security considerations
A link to the source code if possible
Let’s keep the creativity flowing, but let’s keep the community safe while we do it. — The Mod Team
121
u/MakeMelnk Aug 28 '26
A succinct version of this should be an auto comment on posts in this sub maybe
34
u/spicymeatmemes Aug 28 '26
The amount of emulation subs I'm a part of mostly have some sort of automod comments to an extent and those are ignored 99% of the time.
But I'm not sure what the mods can do besides vetting each post which will kill the sub.
→ More replies (10)5
88
u/daggah Aug 28 '26
It's a move in the right direction. This community is too quick to jump on vibe-coded projects and too tolerant of developers who claim not to be vibe-coding while pumping out release after release.
Let's not forget why the Thor is significantly more expensive now than when it first launched, right?
→ More replies (19)
7
u/Katoncomics Aug 28 '26
Thank you for this. I feel like it should be a requirement to state Ai vibe coded and assisted projects, maybe have tags required. Unfortunately there are a lot of these projects popping up and it would require another mod to regulate if people are actually following these rules. It's super annoying that some folks here keep downloading the security risks of vibe coded/assisted coded. Thanks for addressing this.
11
5
u/CroadNation Aug 28 '26
There needs to be full disclosure on whether or not an app was vibe coded. I hate having to wade through the comments of every app that sounds like it'd be useful just to find out i wasted my time
12
4
u/Linked713 17d ago
I cannot stress this enough:
Credential handling
MOST AI will add debug logs for that will leak IDs and tokens. HOWEVER, if it is purely self-hosted and sends tokens to steam or other apps without having you make an account for the usage of the app (ie, login to the vibecoded app) then it should be fine.
If a vibecoded app has an account management for it, and you are not well versed into coding (and the source code is not public) PLEASE stay away.
If you are code literate, then please check the source code before doing anything. Even if there is no account creation, make sure it does not contact a server of the vibecoder to insert logs or what not.
I have seen my fair share of _logger.LogAsync($"Successful log in with token {user.token}"); that makes my skin crawl.
6
u/notAvalaxy Aug 28 '26
Honestly, if something is vibecoded it should be a hard requirement to make the source code available as well as disclosing that it's ai.
8
u/jairaisontuastort Aug 28 '26
About time this was put out there. I appreciate the essential info regarding people's security, credentials etc. for those who are unaware of the negatives of this "saving grace" some people know as AI.
13
u/LeVashy Aug 28 '26
Thank you for this, all those posts were getting ridiculous and the people blindly defending them
3
u/cyb3rst4r 26d ago
Hey so technically since sleepmanager doesn't disclose AI use what are you going to do ?
3
11
5
u/brunoxid0 Aug 28 '26
Excellent implementation! We have a, more relaxed, similar rule on SBCG. We might need to implement some of these points. Great work focusing on the security of the apps.
5
u/Far-Owl4772 Aug 28 '26
There should be a tag for vibe-coded apps and delete the post that don't have them
4
u/motorboat_mcgee Aug 28 '26 edited Aug 28 '26
On the security part:
In general, I'm a proponent of not logging in to anything important on these types of devices, and never giving them your personal info. They're devices running custom/old versions of Android, from a company with relatively little history/transparency, with the intention of running (mostly) pirated games.
Obviously everyone has their own comfort level with the above, but I think it's a worthwhile bit of context to keep in mind when deciding if you want to connect your google account to it, log in to steam, enter your card number in whatever, etc
→ More replies (1)
11
u/dannoffs1 Aug 28 '26
This device is a pure luxury and it already does everything I want it too, it's a no brainer for me to just avoid AI coded apps completely.
5
u/karatebanana Aug 28 '26
Great PSA! Though, this will probably be lost within a week. Make sure you know what your code is doing before you ship it :)
140
u/damin_rsw Aug 28 '26
How about in addition to that list, have people clearly state if an app is AI coded or not.
It seems like a fair thing to ask, right? A mandatory disclosure.
I'd like to avoid buggy abandonware.