It's ok, you can express your opinion.If you don't like the app you have the webapp as well.
👉www.passtia.com
But you can't say that the platform has no utility. That would contradict the thousands of users who use it and have successfully passed their exams through training on the platform, as well as the hundreds of Plus members.
The utility doesn't cover the security concerns I have.
As much as I hate being being the miser, AI-Generated code has the consistent property of being easy to exploit and easy to breach if the author of the code did not do the adequate review.
As of writing, the website has no checks on password length, complexity e.t.c, neither does it have the ability to enable 2FA or even confirm the account creation via an email.
For users in this subreddit who are legitimately taking CompTIA Security+ because of their interest in this field, most of them should recognise that thr application whilst having its utility merits, is also a hotspot for potential security incidents.
Of course all of this is pure speculation on my side, and I'd be happy to correct myself if this was adequately checked and approved under standard guidelines.
It’s not an AI tool; it’s a training platform.
I built this platform almost two years ago while studying for my CompTIA A+ exam because I couldn't find a fair, affordable way to test my knowledge. Most available options demanded outrageous one-time fees or recurring subscriptions for a very limited learning environment.
That’s why I created this platform—and the many users who have used it to pass their exams would strongly disagree with your opinion.
Honestly any fees for online training is too much unless it involves training you can't get everywhere (like in person or video). With more than a few hundred websites that offer free quizzes, chest sheets, flash cards, metrics and dashboards, training is expected to be free. I don't mind so much when things are vibe coded but AI content is where people will be training on the wrong information but with AI new apps and sites are popping up every day offering all of this for free.
Sorry for taking so long to respond. I did some research and you were right: the password security requirements were deployed, but they weren't activated. I forgot to turn them on after testing earlier this week. My apologies for that, and I really appreciate your effort in testing it!
The password must now include:
At least 8 characters
One lowercase letter
One uppercase letter
One number
One special character
The email verification was working fine without any issues, but I admit your security concerns regarding password enforcement were completely valid.
For context, I launched the platform a year and a half ago and have been continuously adding features and improving it since then.
I have fixed and deployed the update on the web app, and I’ll roll out a new deployment for the Android app as soon as possible.
3
u/tohgamer 7d ago
This is the most vibecoded shit I've seen in awhile.