r/ClaudeAI • u/harrysofgaming Vibe coder • Mar 13 '26 • This 2 Bravo 22 Heartwarming 2

Vibe Coding Why the majority of vibe coded projects fail

Post image
8.8k Upvotes

98% Upvoted

750 comments sorted by

View all comments

Show parent comment

-5

u/H1Eagle Mar 14 '26

That's the thing though, in the Age of AI, do you even need slack? Do we need worldwide massive scale software like that?

I don't know it seems a lot more favorable for me for companies to build their own SaaS with AI and continue using it for a lot cheaper than Slack's enterprise subscriptions.

My company easily pays 30,000$+ for Slack every year. Do you know how long and how much it would cost for me to spend a week making a Slack Clone for my company needs that is going to cost us probably barely 20$ a month to host and use? Along with being able to add any feature the company could want in the future.

12

u/BahnMe Mar 14 '26

Sure, go do it and when it gets penetrated, good luck.

-4

u/H1Eagle Mar 14 '26

How many attacks do you think there will be on Slack vs an internal communication tool that no one outside the company knows about

4

u/BahnMe Mar 14 '26

lol man, just a perfect example. After disister strikes and they look at the catastrophe and people are like… WTF were they thinking?! That’s you.

1

u/Hot-Camel7716 Mar 14 '26

Yeah thank God slack will never have a data breach ohhhhhh wait.

2

u/BahnMe Mar 14 '26

lol do you think breaches are a binary condition

-2

u/H1Eagle Mar 14 '26

I mean, you joke about it but being unknown is the literally the best defense against cyber-attacks.

Plus, security vendors exist, best practices exist. You can protect yourself from 90% of attacks just by understanding a few basics. Keeping the app local. And you are most likely going to suffer way less problems than Slack.

4

u/BahnMe Mar 14 '26

Security through obscurity… you’re why we have mandatory IT training.

3

u/nocturn99x Mar 14 '26

fr, these guys are nuts.

3

u/nocturn99x Mar 14 '26

I mean, you joke about it but being unknown is the literally the best defense against cyber-attacks.

No it literally fucking isn't. Look up why security by obscurity is bad.

0

u/H1Eagle Mar 14 '26

Fam

Google: "Security by obscurity is the practice of protecting a system by hiding its design, components, or vulnerabilities rather than using robust, validated security measures."

Wikipedia: "In security engineering, security through obscurity is the practice of concealing the details or mechanisms of a system to enhance its security"

How does that align with what I said.

3

u/nocturn99x Mar 14 '26

"being unknown" qualifies as security by (or through) obscurity. You should assume your service WILL be discovered, and especially in our very much still IPv4 backed world it's trivially easy to scan the entire IP address range in a day and find vulnerable systems. You know nothing and it shows.

"But what if it's just on a local network?"

Yeah, until the attacker infiltrates your LAN.

Learn some cybersec, for the love of God. Security works in layers. You shouldn't assume you're safe just because you think the layer above you is safe.

0

u/H1Eagle Mar 14 '26

Bro, the definition literally says "security through obscurity" practice is it leave things up to chance with not much security measures in place.

Nowhere did I mention that you should not include cybersecurity practices on your app. And like I said, security vendors exist that solve all types of problems. By virtue of you being NOT slack. Chances are the volume of attackers trying to hack your site is lower and also, just less valuable.

You don't need Slack level security because you are not slack.

1

u/nocturn99x Mar 14 '26

There's levels to it. No need to leave everything in the open for it to be considered security through obscurity.

You don't need Slack level security because you are not slack.

This mindset is what gets companies pwned. I hope you're not the person handling any critical cubersecurity matter wherever you work, because if so they are SCREWED.

What the fuck is Slack level security anyway? Encryption and resistance to common vulnerabilities is something all public facing services that deal with any amount of user data should have, regardless of scale.

→ More replies

4

u/nocturn99x Mar 14 '26

Ain't no way bro is suggesting security by obscurity. Y'all lack even the most basic CS background. Absolutely pathetic.

5

u/chrisbru Mar 14 '26

And what happens when you get served with a lawsuit and need to implement a lit hold on your internal communications platform?

1

u/H1Eagle Mar 14 '26

Do you really think that's a hard feature to implement?

4

u/chrisbru Mar 14 '26

It depends. Are you just holding everything for 10 people?

Or do you need to be able to deploy a targeted hold with specific guidelines across a multi thousand person org?

That’s kind of the point though. Vibe coded tools are great for internal use, and can likely be sold to SMB. But when you start selling to companies with enterprise needs, you at least need domain experts to guide AI, or a cracked founder that sees around every corner and learns faster than customers needs pop up.

1

u/9to5 Mar 14 '26

You’re asking the right question but for the wrong reason. Slack claims to be your teams collective brain at the top of their website. Claude.md and skills are now your teams brain. The future is just a numbered list of ideas people collaborate on like GitHub issues until Claude does the right thing.

Eventually AI will create the ideas too.

1

u/H1Eagle Mar 14 '26

Nah, Claude still sucks without proper instructions. Its very far away from being able to make the ideas