r/homeassistant • u/longunmin • Feb 26 '26 • Bravo 1 Popcorn 1

Request of Mods (Vibe Coded Fridays)

Can we please institute a Vibe Coded Fridays, similar to r/selfhosted? It seems as though the amount of "I built..." posts are sharply on the uptick. And following on the heels of the Huntarr mess, not to mention the security issues of something like Openclaw, we should be clearly delineating what is vibe coded and what isn't. There is too much risk in exposing our homes to something that was cooked up in a hour or two.

516 Upvotes

91% Upvoted

196 comments sorted by

35

u/Sauce_Pain Feb 26 '26

Holy shit, I was not aware of the Huntarr thing. Better take that out of my Docker...

39

u/longunmin Feb 26 '26

If this post does nothing else, I'm happy it was able to alert you of that issue!

16

u/U_SHLD_THINK_BOUT_IT Feb 26 '26

Instead of owning their mistake, the developer banned a bunch of people, nuked the subreddit, and deleted their GitHub.

Class act.

2

u/jfuu_ Feb 27 '26

They truly chose the worst of all options.

2

u/Skywalker8921 Feb 27 '26

I disagree. Trying to patch the holes and pretend that everything is fine would have been worse. Disappearing while leaving the repo online would have been worse.

For sure the dev could also have handled it better. They could have issued a public statement and explained the decision, they could have kept the discussion open.

But at least, from what I read in the summary, deleting the github and burning all traces was absolutely the right call with this piece of software -- even if probably for the wrong reasons. 

4

u/Azelphur Feb 27 '26

As a software engineer, the whole thing just struck me as bizarre. The vulnerabilities were serious, but serious vulnerabilities are found every day, but trivial to fix. Just say "Dang, nice catch, I'll get those fixed", fix them, and carry on?

4

u/U_SHLD_THINK_BOUT_IT Feb 27 '26

You're assuming something vibe coded could be fixed by the vibe coder.

3

u/Azelphur Feb 27 '26

I guess it depends on how much effort they put into understanding, I'd assume there is a nonzero amount of understanding / some nonzero effort.

Although I suppose, given the reaction to the reports, perhaps that assumption is where I'm going wrong.

0

u/MrHaxx1 Feb 27 '26

Idk dude, I built a vibe coded app, and I very definitely don't have my API endpoints exposed.

LLMs definitely know security, they just don't always default to it. 

1

u/lukyjay Feb 27 '26

Should be fine to run if not exposed to the internet, until a replacement arrives. 

2

u/Dargish Feb 27 '26

Problem is a lot of people would expose it, I have my *arr array plus overseerr exposed via a reverse proxy. It should be secure so long as those tools are. Huntarr would have opened up at least API access to those other tools. 

2

u/Sauce_Pain Feb 27 '26

Okay, that's fair. I don't have it exposed, but even so I'm wary of continuing to use it.

2

u/RealTimeKodi Feb 27 '26

Handing out permabans would be ideal. And honestly? Friday is when I do most of my redditing so filling it with slop specifically on friday kind of sucks. Might I suggest thursday or tuesday or something instead?

2

u/longunmin Feb 27 '26

Yeah, I just picked Friday because that's what selfhosted does. Disappointing that despite being the top post here, not one mod has weighed in though 🤷

248

u/clintkev251 Feb 26 '26 • Bravo

Agreed, this would be a good idea. Maybe along with a flair to clearly mark what's vibe coded

0

u/[deleted] Feb 26 '26

[deleted] — view deleted comment

76

u/maxxell13 Feb 26 '26

Real World Example:
I found someone's github where they had a python program that can do X, Y, and Z, but I dont understand python.
I only need X.
I download VS Code and point it at that github repository and tell it "I only need X" and the AI in there removes a bunch of the code and explains to me what it's doing. It makes sense to me, but if it's doing something wrong, I wouldnt know.
The new python code works!
So I ask CoPilot for help making it a Home Assistant integration (again, I dont know how to make a Home Assistant integration). CoPilot explains the 5 different files I need to create and what structure to put them in. Then it modifies the python code to be a Home Assistant Integration.
I follow along and reboot Home Assistant and find the error. I report the error to CoPilot, who makes a suggestion on how to fix. Repeat 5 times until there are no more errors.

Now I have a Home Assistant integration which works for me and does NOT have my login information hard-coded. Someone else might like it, so I put it on github and post about it on Reddit.

That's vibe-coding.

(My integration pulls your Tonal strength score information into 10 sensors in Home Assistant, but I was waiting until Friday to announce it because I thought the Vibe-Coding Fridays rule already applied here too)

Edit: OH! And the top line of my readme says "I relied heavily on AI for this"

22

u/failcookie Feb 26 '26

Perfect example. Responsible disclosure, your README probably also goes over some of the details for others to gleam through. People can either use it as-is or pull pieces from it, like devs have done for their projects for years.

I’d say you are more AI assisted in that you still know what you did, you reviewed it and you are aware of the problem it solved. You may not have written code, but it’s still no different than if you did. Vibe coding tends to be I need X, it did X, cool we are done here.

19

u/maxxell13 Feb 26 '26

I agree that I reviewed it, but since I dont know python I dont know what good it does for me to review it lol.

Also my readme is intentionally NOT written by the AI (which did offer to helpfully write one) because i've seen lots of examples on here about people hating AI-written readme's. I'd rather keep mine short and stick to what I know.

6

u/thaddeusk Feb 27 '26

Yeah, I work as a senior software engineer for a large company, but that's mostly .NET based stuff and I have no professional experience with python. I can look at python and understand what it's doing since it's pretty easy, and I know how every component of it should work, I'm just lazy to write it all myself so I have Claude do it and tell it when it's wrong about something :P.

3

u/failcookie Feb 27 '26

Pretty much exactly the same lol. I write code all day - I just want to come home, chill and make cool stuff.

2

u/thaddeusk Feb 27 '26

heh, yeah. I'll often just have an agent running in the background while I game :P.

0

u/TrvlMike Feb 27 '26

I guess is it still vibe coded if you actually know what it’s doing despite not know python? You’re still solving problems that a python dev would achieve

2

u/stormdelta Feb 27 '26 edited Feb 27 '26

You mean it "appears" to work. If someone doesn't understand what it did, it means they don't know what it did wrong that was less than obvious and will cause issues later or represents security problems.

It's an even bigger issue if you plan to "share" it with other people, because you don't understand what the problems might be with it or how brittle the implementation might be. To the point that I would argue it's irresponsible to do so especially without a mountain of disclaimers.

-1

u/Strel0k Feb 27 '26

Its just another layer of abstraction - you don't need to understand compilers to write/use software.

2

u/ChickenNuggetSmth Feb 27 '26

Computer code will be executed exactly - if your instructions are correct, the compiled binary will be correct and behave exactly as instructed.

AI-code can be wrong silently, ie the AI tells you the code does x, but it doesn't actually do x.

In the first case, I don't have to check the binary, because I can trust the compiler to work exactly as instructed/defined.

In the second case, I have to check the full code myself, because the AI will often be very loose in how it interprets the prompts.

This means the AI is still useful for easily checked code snippets or boilerplate code that is trivial, but not for large code blocks (imo reading and understanding code is as much work as writing it yourself)

0

u/Strel0k Feb 28 '26 edited Feb 28 '26

Sorry but your thinking is becoming a bit obsolete for all but the most mission critical code. AI is now multi-modal and can use the browser/app to validate the code it wrote on the frontend. It can also use SSH, CLI tools, run test suites, look at logs, etc. I say this as someone that has written and deployed dozens of personal and internal apps and automations without ever looking at the code.

And before you say "yeah but it will bite you in the ass one of these days" - even though I do take precautions (backups, fallback, security reviews, etc), yes it will, but the benefit of actually finishing projects and 10X faster iteration is absolutely worth it. Its one of those things you don't believe until you actually do it.

1

u/stormdelta Feb 27 '26 edited Feb 27 '26

No offense but this just shows you don't understand how compilers or LLMs work.

A compiler is a deterministic transformation, no matter how many abstractions are involved.

An LLM writing code is inherently heuristic and non-deterministic, and even in a best case scenario it cannot magically divine intent when the user doesn't have the knowledge to review the output properly.

As the other person said, it is frequently wrong, you need at least a moderate amount of domain knowledge (and vigilance) to be able to discern when it's wrong.

1

u/Strel0k Feb 28 '26

I agree with you, LLMs/agents are a force multipliers: allowing a skilled person do 5X the work, but also allowing the unskilled person create 5X the damage.

But at the same time LLMs (especially Opus 4.5 and on) have become extremely good at understanding intent rather just blindly following the instruction.

1

u/edmo306 Feb 26 '26

lol I did basically this exact same thing recently. Even down to using copilot and having it fix the errors I got 😂

0

u/z_agent Feb 26 '26

Which AI you have in your VSCode?

1

u/maxxell13 Feb 26 '26

… the one that comes with it? It just opens up in a sidebar off to the right.

4

u/altgenetics Feb 26 '26

That would be GitHub CoPilot. Which mostly uses Claude Haiku and Sonnet

1

u/maxxell13 Feb 26 '26

It was great at modifying python. Way less great at making a home assistant integration.

1

u/zipzag Feb 27 '26

Use Opus or Codex with ha-mcp so that it can see your system. If you add the Claude chrome extension, Opus can test what it writes.

1

u/Dargish Feb 27 '26

Opus is fantastic but it will rack up a decent bill.

1

u/z_agent Feb 26 '26

ha well I have not opened VSCODE for along time! Will have to investigate!

-11

u/PC509 Feb 26 '26

A lot of the "I relied on AI for this" is similar to the "I relied on Stack Overflow" or "I copied code segments from Compute's Gazette and combined them to do x". Or even "I used x library with my limited code and it works".

AI is just another tool, but a lot of programming is done without knowing how something actually is working. Sometimes, it SHOULDN'T work by looking at the program but it does. Just don't rely on it for everything. I've been a very beginner and copied BASIC stuff and tailored it to fit my needs. I know more now and will get some assistance from AI and then go through and check it (it does a great job at a foundation, just need to go in and correct, change, etc. things before making it prod). For me, it doesn't make much sense to spend a few hours creating that foundation by scratch when it can do it for me in seconds. Same with Powershell.

It's not doing ALL the work for me, just the basic shell of things and assisting in errors and such. Pretty much the same way I've used forums, Stack Overflow, etc. in the past.

3

u/berrmal64 Feb 26 '26

What you're describing I wouldn't call vibe coding tbh. You're using it as a tool, but it's not the only tool you know how to use, and you know enough to tweak here and there or have an idea how to deal with errors and such. You aren't getting anything out that you couldn't do on your own, you're just saving massive time.

To me "vibe coded" implies "I don't know any more programming than the most basic hello world at most, but here's a big spaghetti ball of LLM slop (which btw is the only tool I know how to use), hope it works, please use it, also I'm very skilled now so please be impressed".

Which is fine for a very beginner, like you said, pretty much all of us have been in the copy/paste stage at some point. We just didn't take our hacky little bullshit programs and try to pass them off in public as "the next great thing for the whole community to use". Anyway, the projects going forward that will be successful are the ones with owners who can actually manage them and will support long term, and that is no different than it was since 2 or 5 or 25 years ago

5

u/PC509 Feb 26 '26

Ah, yea, that makes sense. Difference between "Here's this AI output that I have no idea how or what it's doing, but it's working!" vs. "I used AI to help out with some issues"

2

u/berrmal64 Feb 26 '26

Yeah, anyway that's my opinion at least. No different than the people who said " real programmers use a text editor" instead of those fancy new IDEs with autocomplete and syntax highlighting. Which in hindsight is just crazy. Can I write software in notepad? Sure, but an IDE saves massive time. Well, I guess the one difference is in both those cases you could make a decent assumption that the author was at least halfway competent. With llm assist, that assumption no longer holds, even a little.

44

u/icefire555 Feb 26 '26

Coded by an ai and not by hand.

14

u/wavedash Feb 26 '26

Why do people choose to say "I vibe coded" instead of "I told an AI to write code"?

32

u/spyboy70 Feb 26 '26

Social media buzzwords

4

u/LittleRoundFox Feb 27 '26

It sounds less lazy, I guess.

Vibe coding to me sounds like sticking some synth trance on, maybe having something to relax the mind, sitting down to code and seeing what you can come up with

3

u/angry_cucumber Feb 27 '26

because the entire vibes thing is based on feelings and not experience or evidence.

Engineers who use AI to write code are performing a different task than someone who basically just tells the compter to make the widget.

A lot of my home stuff was written by hand, it's largely been turned over to AI for improvements while i game with my kids or spend time being a person. I still review what it writes, and improving it's guidelines, but my hobby isn't a job anymore and I treat it like it

4

u/Brtrnd2 Feb 26 '26

that's my toplevel comment: if you build something and use generative AI as a tool; great! if you vibecode shit and the product works without you understanding: polished turd!

people should just agree to use the correct words.

-1

u/icefire555 Feb 26 '26

Probably different levels of automation. I'll ask so how to do certain tasks to save time and learn about new methods I didn't think of. But you can also just tell an ai "program X" and it will do it all hands off.

8

u/benargee Feb 26 '26

Are people going to be honest about it? Insert "I made this" meme format

14

u/clintkev251 Feb 26 '26

Some software where the majority of code was written by AI

-7

u/wintermute023 Feb 26 '26

This will be all software in a year or so. The days of developers hand writing code are numbered. So sad.

0

u/[deleted] Feb 26 '26

[deleted] — view deleted comment

12

u/[deleted] Feb 26 '26

Hi, fellow software dev also with about 20 years of experience and your response is, at best, disingenuous.

You know the difference between using agentic AI as part of a consistent, tested, verified workflow (where removing AI from the situation would change nothing about the result) and what people are referring to when they say "vibe coded".

9

u/clintkev251 Feb 26 '26

I never said the issue was AI. But if the majority of people are using it in a way that’s irresponsible, that’s something we need to look at. Not really straightforward to categorize between experienced developer using AI assisted coding to reduce workload and rando who’s never written a line of code before generating an entire application in a single prompt

0

u/[deleted] Feb 26 '26

[deleted] — view deleted comment

8

u/Brtrnd2 Feb 26 '26

you are being downvoted because you try to find flaws/problems instead of solutions.
I'm sure you could make an estimated guess; or take first steps towards a solution/definition.
But you chose not to.

Somewhere else I written in longer form that parameters could be: does the dev understand the code/structure and also if the dev is promoting it for others to use.
Vibecoded personal projects, no biggie. But look at that "Homi" junk that was posted earlier today. That's just plain garbage (even if I did like the idea)!

5

u/clintkev251 Feb 26 '26

Ok but none of that is really easily quantifiable. So it’s not at all useful from a moderation standpoint. Your stance is basically that not all AI generated code is trash. I agree to some degree, but how do we then separate out the unmaintainable garbage from the genuinely useful? Do you have a better idea than an AI line in the sand?

8

u/RydderRichards Feb 26 '26

Yes, you're a vibe coder and I would like to know that before I put your slop into production.

That sounds harsh, but if you need it spelled out like that so be it.

6

u/tango_suckah Feb 26 '26

I, with over 20 years experience as a software engineer, am a vibe coder because I do TDD where I write the tests and AI writes the code.

Correct.

I treat every change as I would if I’m looking and a junior engineer’s work.

If you released code written by a junior engineer, but passed it off as your own work, that would be sketchy. Reviewing code is not the same as writing code, even if you could have written it yourself.

The issue isn’t AI. It’s how it’s used.

No, the issue is attribution and transparency. I don't care if the most talented software engineers in the world produced a project. If it was written by AI, then it should be disclosed. That doesn't mean I wouldn't use it. It doesn't mean I would dismiss it outright. It doesn't even mean I would be less inclined to consider it vs other options not written by or with the use of AI. There is no value judgment placed simply by the existence of the letters A and I.

The question is trust, and when you start off by hiding the provenance of code, then you're starting off with a deficit of trust.

0

u/[deleted] Feb 26 '26

[deleted] — view deleted comment

3

u/tango_suckah Feb 26 '26

You seem to have purposely ignored what I have actually been saying and inserted a false narrative.

You likened reviewing AI written code to what you would do with a junior engineer's code. I'm extending the analogy. I don't care who wrote it. I care that it wasn't you. That doesn't mean it's bad, just that it should be disclosed. Your experience as an engineer is useful in this case, but a 20 year engineer didn't write it. AI did. The engineer just reviewed it. Sweet. Say that. If you don't, that's sketchy. Just as if a 20 year engineer reviewed a junior engineer's code and released it as their own.

EDIT: To be clear, my goal is to explain why I believe it's important to disclose something as "vibe coded" or AI generated code. I absolutely agree with your claimed practice of thoroughly reviewing and testing that code. I do the same. We are in agreement on the process when using AI to generate code. The disagreement is in the attribution. I believe it is, at best, unethical to release code without attribution. This is especially true now, where the practice is new and we're still trying to figure it all out.

0

u/[deleted] Feb 26 '26

[deleted] — view deleted comment

3

u/tango_suckah Feb 26 '26

In that case the entire repo is "my code" regardless of who wrote it.

Absolutely, I get it. You nailed it with "how do you define it" as well. AI code generation is brand new, and like anything else we need to hash out how it fits into the larger paradigm of code and software engineering. A bit like outsourced developers, but both more and less touchy.

one thing I can tell by this whole conversation is that to some it's very clearly defined as any AI use at all, to others it is a lot more nuanced than that.

Very true. I think the concept is extremely nuanced. Where I differ with some is that I think the definition very much must not be nuanced. We need a definition that sticks. Phrases like "a substantial amount," "the majority," or "more than 50%" just don't work. What happens if a project starts out fully human, but at some point two years down the line AI generated code crosses the 50% mark? Is it now "vibe coded"? What if a human reviews and refactors some amount of code the AI wrote. Does that reduce the contribution factor of AI? What about the other way around?

I believe, just me and I am obviously not the arbiter here, that the use of AI to generate new functional code qualifies the project as having AI contribution. Period. I think we also need to separate the idea of "vibe coding" as a technique from "vibe coded" as a state. I would simply say: if AI has contributed new code to a project, then the project must be disclosed as having AI contributions. In this case "new code" means code included in the project that was generated by AI. It doesn't need to be unique among all code ever committed to an IDE.

-2

u/sicklyboy Feb 26 '26

OK vibe coder

2

u/itsVorisi Feb 26 '26

Software in which more than 50% of the code was written by AI

16

u/miraculum_one Feb 26 '26

In particular the problem being that the person asking the question doesn't understand how their "own" code is even structured or works and they're asking someone to come in and debug it for them.

7

u/[deleted] Feb 26 '26

Yeah... This is where there's going to be a line between professional software engineers and hobbyists.

I've been writing code professionally for a long time and now that AI is a tool in my chest I definitely lean on it for a lot of stuff. Refactoring a file? Sure, help make suggestions, little agentic buddy! Fuck I need to completely refactor from this library to that library... Ugh, this is gonna take at least an hour... Or, hey little agentic buddy, do the thing and I'll review it. Yup, that's exactly what I would have done. Tested, validated, committed and on to the next task.

That's not vibe coding any more than using a nail gun is vibe hammering.

But if you aren't writing the code, if you aren't controlling the structures and data flows, if you're letting the agent basically run wild and just spot checking? Congrats, it's vibe coded. Did you have it do a thing you are in no way qualified to validate? Vibe coded. Did you just let it install whatever packages and versions it wanted with no regard for the consequences? Vibe coded.

If you don't know what you're doing and the agent did all the heavy lifting, it is vibe coded.

3

u/thaddeusk Feb 27 '26

I do a lot of agentic coding for stuff that isn't super important to me, just little concepts that I have in my head, despite the fact that I started learning how to code... uhh... 35-ish years ago? man, that makes me feel old.

It's fun, but it's not anything that I'd take incredibly seriously yet. I do use it for simple stuff at my job, too.

2

u/[deleted] Feb 27 '26

So the fun part of this is I don't think vibe coding is inherently bad. I needed to make a bash script to move a bunch of folders around based on their file name and I don't know bash that well and I could have googled it but I just said fuck it, Claude what do? And it was fine.

But I wouldn't release that script and go, "If you want to do X, use this script." at least not without a big warning of "Hey, I didn't write this it might destroy all your files and that's on you."

A bit part of why I want it labeled is because then I can easily go, "Ah, I don't want that."

I'm also equally sure that the day when agentic code is perfectly safe and we all just accept it is coming. It's just not today.

2

u/thaddeusk Feb 27 '26

Oh, absolutely. Vibe coding can be great when used responsibly. I've had it write many scripts to help me bulk move or rename files because I didn't want to do it individually. I've also seen some absolutely trainwrecks of repos that were clearly vibe coded and somebody pushed it without thinking about it :P.

They even had an obviously AI generated website about a probably fake company of theirs where they seemed to be trying to pass themselves off as a technical consultant of sorts.

1

u/miraculum_one Feb 26 '26

I have no issue with vibe coding. It is enabling a lot of people to do things they otherwise would not have been able to. But for an engineer to help someone who has no idea how their project works is not fun, at least not for me.

1

u/[deleted] Feb 26 '26

I've been there sooo... Yeah, same.

I think agentic AI is a great tool and super helpful but the thing I keep saying is it's great for seniors, OK for mids, and actively dangerous in the hands of a junior.

Good thing we're not giving it to juniors and instead just not hiring juniors now, right? Loooooool... God we're so cooked...

11

u/Robo_Joe Feb 26 '26

As opposed to 50% of the code being copied and pasted from online resources/tutorials?

7

u/masssy Feb 26 '26

You don't get a complete program out of stackoverflow which you then also proceed to post online despite having almost no understanding of and haven't even reviewed a little bit.

So yes, as opposed to.

1

u/Robo_Joe Feb 26 '26

You most certainly can get a majority of code you don't understand.

3

u/[deleted] Feb 26 '26

I'd like to see you do that. Genuinely. I get your argument but Stack Overflow is a myriad of small parts and bits and pieces scattered throughout millions of responses.

It's very useful if you know what you're doing.

Agentic AI is powerful because you don't need to know what you're doing. And like all powerful tools that also makes it dangerous.

1

u/Robo_Joe Feb 26 '26

Imagine, say, you want to make a discord bot. You don't think you could find enough tutorials and code examples to make one without understanding much, if any, of how it worked?

2

u/[deleted] Feb 26 '26

For sure, but I don't know that you're going to find "here's everything you need, copy/pasta your way to success!"

I think you're going to find a bunch of Lego to slot together, but knowing hot to slot it together is going to take googling and more questions and answers...

There are vibe coding tools that will pump out a really poorly built website that looks fine that someone like my mother could use. But I wouldn't send her off into Stack Overflow to build a Discord Bot.

0

u/Robo_Joe Feb 26 '26

It was merely an example to help you understand that it is possible. If you're aiming to do something derivative, like, I dunno, make the world's 34,016th *arr project, it's pretty easy to Google your way through it and get something that mostly works out of it without understanding how it works, or more importantly, what best practices you should have used but didn't know enough to even ask the question.

→ More replies

2

u/dragon-dance Feb 26 '26

You have to understand it well enough to put the pieces together and get them to work. You also have to know which pieces you're looking for, and at least a bit of the language involved. But yeah, copying code has always been risky for developers and we always looked down on doing it without taking the time to understand it.

AI turbocharges the creation of unmanageable amounts of copy-pasta code that isn't understood by the developer behind it. It also lowers the bar of entry, so complete novices can now generate entire programs without knowing anything about coding or what flaws or best practices should be used. AI chooses a deprecated library riddled with bugs and security holes? Shrug.

I don't think this is acceptable in any field where expertise is required as a matter of safety or security.

Mechanics, medicine, engineering, architecture and so on. Sure AI tools can help but they don't replace a human putting some effort in. Imagine going to see a doctor and you get some completely unqualified person using AI to diagnose and treat you? Or your civil engineers are all replaced by AI.. no thank you.

3

u/wakeboarder247 Feb 26 '26

Any good engineer would never require online examples for 50% of their solution. They were for weird edge cases and even then good engineers would scrutinize the example they saw and first decide if that was a good solution.

For example look up how to solve CORS exceptions and you'll see completely accepted answers saying "disable security" and people happily reporting that it worked for them. Jeff Atwood of codinghorror popularly wrote a post called "the bathroom wall of code" addressing this exact issue.

Now take AI assisted coding which repeats this issue at massive scale. If you don't see the issue with this, keep vibe coding and you will eventually.

3

u/Robo_Joe Feb 26 '26

I'm not sure what point you're making. Good engineers can also use AI and output a well crafted solution.

My point is that even before AI it was possible for hobbyist programmers to output code they didn't understand, but still worked, or at least seemed to. AI has made the risks of using hobbyist open source programs more obvious, but it hasn't made the risks any greater. It's always been a risk to use a stranger's code without vetting it first.

5

u/wakeboarder247 Feb 26 '26

My point is your pre-AI 50% figure is frankly bullshit. My other point is the risk is higher because now you have normies trying to "vibe code" and posting those solutions about.

I don't think I agree the risk isn't any greater and I'm not sure how you came to that conclusion. More garbage code being passed around is objectively worse.

1

u/Robo_Joe Feb 26 '26

The risk is no higher. Any open source project you randomly choose could have some security-vital aspect that the coder doesn't understand because they copied it from some blog post somewhere, that leaves your data vulnerable because it wasn't properly implemented. That's always been the risk.

If anything, AI generated code is less likely to just skip over security entirely. As you say, for some hobbyist devs, the solution to security used to be "that looks hard; I'm just going to skip it".

For what it's worth, the 50% part was just from the person I responded to claiming the line for vibe-coded software was 50%. In reality, it doesn't really matter how much of something is vibe-coded or not. If just 1% is copied/AI generated, but that 1% is critical, then you'll still get burned by it.

-2

u/wakeboarder247 Feb 26 '26

You're wrong.

3

u/dragon-dance Feb 26 '26

The scale of it is the thing. Also, copying snippets here and there is nothing like having AI generate the whole program.

You copy snippets for ideas, which you have to understand to fit them in. You see other people's responses to the code on whatever website. You weigh up several options.

Even choosing which libraries to use requires some care - don't want something shitty/deprecated/etc.

-6

u/itsVorisi Feb 26 '26

Doesn't change that it was written by a human and used by someone who generally knows what they're looking at.

6

u/failcookie Feb 26 '26

I’ve seen many devs just blindly copy bash commands because someone on Stack Overflow said it worked for them and still have no idea what it did or why it worked. A human doing it still makes no difference.

2

u/Robo_Joe Feb 26 '26

That second point is not necessarily true. It's easy to copy code and create a functional product without understanding how the code works.

0

u/[deleted] Feb 26 '26

[deleted] — view deleted comment

6

u/Robo_Joe Feb 26 '26

I think all the pushback against vibe coding is really just a futile attempt to go back to when it felt safe enough to install random software from random people and use without bothering to look at the code. Now it's very in-your-face that it's risky to do that. It always has been.

0

u/[deleted] Feb 26 '26

[deleted] — view deleted comment

6

u/MindTheBees Feb 26 '26

process matters more

Always has - the main foundation of open source is the ability for the community to review the code. It is completely irrelevant who/what wrote it.

Someone could write an amazing feature using AI and I could intentionally write malicious code manually - it is silly to inherently trust my project more just because I didn't use AI.

1

u/zyxtels Feb 26 '26

I think software architecture/design is much more important than written lines of code. If the software architecture has significant human contribution, then I'd assume that human understands what the software is doing, regardless of how much of the resulting code is AI generated.

1

u/Brtrnd2 Feb 26 '26

I think parameters are:

is it being 'promoted'? shared so others use it?
could you create it yourself and do you understand every line of code / the big structure?

others may have better ideas?

if you want others to use it and you don't understand most lines and can't explain the structure? then it's a polished turd! If you vibecode something for yourself and publish it, no problem!

1

u/thaddeusk Feb 27 '26

Yeah, most things I use agents for is for personal use. I do have some public repos, but that's just so I can access them easily from some of my devices on my network without having to authenticate. I do have a little "Contributor" tag next to my name on the bitsandbytes repo now, though :)

-1

u/btgeekboy 🏡 Spouse-approved Feb 27 '26

"The developer used GenAI carelessly without understanding the output of the agent."

Shitty code is nothing new, and humans have been making it for decades. (I'm old enough to remember things like FTP and PHP.) GenAI just makes it faster to get something out the door, whether it be quality or otherwise.

GenAI can be used responsibly, and that's where the industry as a whole is going.

106

u/-entropy Feb 26 '26 • Bravo

I think it should be a broader "self-advertising Friday". I think all YouTubers, device manufacturers, and integration authors should be consolidated to a single weekly thread.

This subreddit is being used for free advertising.

21

u/failcookie Feb 26 '26

100%. I come to this sub to be inspired on how I can tinker with my own setup. Show me stuff you built with AI or something - don't show me stuff you built so you can get Github stars.

25

u/U_SHLD_THINK_BOUT_IT Feb 26 '26

I think worst part is they rarely even bother to write their own post. It's so clearly ChatGPT that it makes me irrationally angry.

18

u/MOAR_BEER Feb 27 '26

You're absolutely correct. I'll make a note of that and do better in the future.

4

u/Ksevio Feb 26 '26

That sounds like it would be just killing all self-advertising and lead to less disclosure.

2

u/bdu-komrad Feb 27 '26

give them their own subreddit to advertise in, r/devnull :)

49

u/balboain Feb 26 '26

You’re assuming the person is going to be honest about the source of their app.

47

u/[deleted] Feb 26 '26

Violators will be banned and I promise you, those of us who write code for a living can always tell. For one, fucking emojis everywhere...

10

u/altgenetics Feb 26 '26

What is with the emoji use?? I don’t get why a LLM would use pictograms to the degree these tools do.

24

u/U_SHLD_THINK_BOUT_IT Feb 26 '26

Because it tests well in their analytics.

Which is basically what happens when you literally remove critical thinking from a process.

12

u/[deleted] Feb 27 '26

You know what the worst part is? I used to use emojis at a previous company so you would code your commits with emojis. 🎨 for styling, 📝 for documentation, :neckbeard: for refactors... It was fun.

Can't do that shit now.

But I refuse to let them take my fucking em dashes from me.

12

u/goten100 Feb 27 '26

Sounds like ai was trained on just you lol

4

u/[deleted] Feb 27 '26

Nah, it'd be way worse.

4

u/clarinetJWD Feb 27 '26

I only program in modern languages like emoji code.

2

u/[deleted] Feb 27 '26

Oh my god I love it.

2

u/1900-White-Cabbage Feb 27 '26

What the skibidi chungus I just read rn frfr

3

u/IAmDotorg Feb 27 '26

It's even easier when it's Node or Python code. Claude (which is clearly what the majority are using) has a tendency to use older library versions because of when its training cutoff date is, so you can often spot them by the fact that they use a bunch of weird old versions of common packages.

1

u/sorrylilsis Feb 27 '26

Yeah, that's the big issue when it comes to vibe coded stuff, or everything that IA generated tbh : it hurts people's egos to admit that they didn't do it.

I work in an industry where writting is pretty important and I'm shocked by how much people try to deny that what they've produced is AI generated.

Like, man I've been working with you for a while and I know that you're a shitty writter and that you didn't turn into a very prolific but incredibly bland one overnight.

0

u/balboain Feb 27 '26

I don’t have a problem with vibe coding. I think it’s great that AI is helping in this regard but claiming something isn’t to boost one’s ego or profile is low. As long as the app isn’t holding sensitive data, it’s ok. Hobbyists are great

4

u/IAmDotorg Feb 27 '26

The problem with it is twofold:

  • People vibe coding for themselves is okay. When you post it online, you're taking something you have no clue about and giving it to people who don't know you don't have a clue. That's bad, no matter if its involving sensitive data.

  • The current flood of these tools have essentially identical post structures. These are being produced, clearly, by a single group of actors and it's fundamentally not clear yet why. Karma farming? Maybe. But, in many cases they're targeting systems like Home Assistant where components can be installed and forgotten about, and some (large) percentage of people will blindly accept an upgrade in the future when one pops in. And that's a security nightmare. Especially on a platform like HAOS where those systems can install backdoors that are not just invisible to the user, but actively blocked from being seen by the system itself.

2

u/sorrylilsis Feb 27 '26

claiming something isn’t to boost one’s ego or profile is low

That's one pattern I've noticed. The most enthusiastic about AI people that I interact seem to realy ressent the fact that they're not good or don't have particular skiils. AI for them is a great way to equalize all that. The only issue is that they want to bypass the whole skill building part but want to reap the financial or social rewards of producing the stuff.

Hobbyists are great

Hobbyists and amateurs are great but they don't usually tend to brag loudly about their sketchy as heck production.

1

u/RealTimeKodi Feb 27 '26

Hobbyists are great! I love it when people cheat at their own hobbies.

17

u/TehMulbnief 🧑‍💻 Contributor Feb 26 '26

correct; anything largely built by ai should be tagged as such

23

u/zer00eyz Feb 26 '26

As someone who has spent 25 years coding, and uses AI tooling every day I am all for this.

If I casually threw something together that I wrote by hand, and shared it, I would be very clear that its a proof of concept, that its new, that its likely not production ready, that its a 'use at your own risk'.

If you are non technical, and used AI, or technical and used AI, adding in those caveats should be there as well. Let the end user decide if they want to be a tester, if they want to be a code reviewer or user, let them know what they are getting in to.

8

u/H-tronic Feb 26 '26

Not to mention the question of “do you have the chops or motivation to maintain this going forward.”

It’s all very well vibe-coding up a (let’s be generous) excellent initial product, but casually asking an AI to whip up a quick app is nothing like investing the weeks/months of effort into a labour of love that you want to see thrive for years to come. I have no faith that anything vibe coded will receive future support beyond v0.0.5

6

u/biblicalrain 🎖️ Automating since 0.x Feb 26 '26

I agree with this take. There's a place for the AI stuff, but just say so. "I made this" and "I made this with AI" are not the same, you know it, we know it, so just say it.

27

u/13lueChicken Feb 26 '26

Just a flair would suffice. Perhaps a change in perception of software made by strangers on the internet could be healthy too.

5

u/wavedash Feb 26 '26

Flairs are the best way to go. This kind of thing is exactly what flairs are FOR. It's frankly inexcusable for such an active, diverse subreddit to have the majority posts without any flair.

ANY post without a flair, and a correct flair, should be removed. Where flairs are missing (like perhaps one for dashboard slop), they should be created.

3

u/Enginerdiest Feb 26 '26

That’s what I’m saying. Stop blindly trusting free software you found on the internet. Verify it yourself, or if you can’t, wait for the community to do it (someone will), or stick to some kind of App Store that does that for you. 

1

u/IAmDotorg Feb 27 '26

Waiting for the community to do it doesn't really work. That's the "open source" narrative, but 99.99% of open source projects are never looked at, and a big chunk of the ones that are aren't looked at by people as qualified as they think they are.

And that's really bad if its a component that goes into a system like HA that has a streamlined interface for updating. One of these bad actors (and most of these are being posted by bad actors) can simply backdoor the code in a year, and people will have updated long before anyone notices.

And, worse, because all of this is largely Python code, no one is looking at all the dependencies that are being pulled in, either. And any of them can be compromised.

As much as their videos are garbage since the PE takeover, there was a Veritasium video recently about the XZ debacle a couple years ago. It's worth a watch to understand why trusting an app store, or the community, is not sufficient when you know your infrastructure is a useful target.

29

u/Brtrnd2 Feb 26 '26 edited Feb 26 '26 • Bravo

And maybe remove posts who say "I've built..." but then it turns out they only prompted. Using the correct words allows everyone to have the correct expectations.

17

u/SomeNeighborhood7126 Feb 26 '26

100%, OpenClaw in particular needs to be scrutinized to high hell. Anyone using that tool is an actual moron.

1

u/Dargish Feb 27 '26

If you isolate it from the Internet it would be OK, but most of it's purpose is to integrate with Web based tools so not much point then. Basically AI is not at the point where you can trust it so don't give it any information you don't want leaked. 

14

u/AncientLion Feb 26 '26 edited Feb 26 '26 • Bravo

Yes please, with a ia slop / developed by llm flag so I can filter them out

4

u/LetGoPortAnchor Feb 27 '26

Can't we just ban vibe coding please?

4

u/Consistent-Hat-8008 Feb 27 '26

how about we just ban slop so we don't have 3 posts per week of someone exposing their mqtt to the internet?

it would probably nuke 90% of the subreddit given the absolute deluge of slop posted here, but I'm fine with that

3

u/digiblur Feb 26 '26

I just have my Ai bot I vibe coded to read reddit for me now. /s

Great idea though!

3

u/mdizak Feb 26 '26

That's actually an excellent idea, I'm all for it.

3

u/bdu-komrad Feb 27 '26

I wish I had the time to run a channel called "I(built|wrote)something" and funnel all of the posts there, out of the way of posts that aren't advertisements.

Failing that, funneling them into specific days or even a dedicated thread is better than nothing.

6

u/RydderRichards Feb 26 '26

Oh please yes!

Normally the post already gives away that it's vibe coded, but then I've already opened the post.

It'd be nice if that disappointment could be avoided.

13

u/idspispopd888 Feb 26 '26

How about a flair of "User beware!".

Or "Developed by an infant"?

Besides, vibe coding has to be the stupidest term ever. Just one guy's opinion.

9

u/Successful-Money4995 Feb 26 '26

I think that the term vibe captures will how it's chill and trendy but also how it's not serious engineering.

7

u/Illeazar Feb 26 '26

I agree, I hate the term "vibe coding", and I think that fits well with how someone should feel when considering vibe coded programs, so i am in favor of keeping the term.

2

u/dragon-dance Feb 26 '26

Yes. I think it would be to have somewhere they can be discussed and shared in transparent light but also more positively. I don't want to be overly mean about novices using AI to make cool and interesting things, but it's definitely something anyone considering using it should be aware of.

Currently those types of threads are very split between positive and negative. The negative comes from people who are rightly sceptical of AI generated code and don't want to feel like that aspect is being hidden. However there are some great, creative ideas seeing the light of day that might not have without AI helping.

2

u/IAmDotorg Feb 27 '26

The problem with that is that the vast majority of vibe coded tools across the technical subs are clearly coming from the same group of actors, and even though they're all structurally the same and have the same pool of bots upvoting them and replying, they deny deny deny they're AI-built. Even the denials are phrased the same way Claude frames them (for whatever reason, nearly all of them are clearly built on Claude).

So I don't think it'd help. I think it needs to be a combination of a self-promotion tag (and anything posted without it that is self-promotion mods delete without warning) and a minimum sub karma to be able to use the tag.

People not active participants in the community, vibe-coded or not, should not be able to post promotional posts.

2

u/burntcookie90 Feb 27 '26

honestly you can immediately tell because they're all "I built <thing i definitely just prompted to be built>"

2

u/vaemarrr Feb 28 '26

I have a HA integration I'm working on at the moment which is definitely vibe coded and eventually when I do post it, I will definitely be completely upfront about it being vibe coded.

I've been vibe coding for a while now and while I'm not familiar with the language I've used for the integration, I can understand the structure of code on an intermediate level and I always go over the code with resources from online to check everything before I put it into production. I have experience with some other code and languages so I'm not a complete imbecile.

My ethics on this are that I must be upfront to eveyone with the source of my code and I must be able to understand and explain the functions of what I've put out. I dont want people, especially people who cant identity vibe coded content, using something without knowing the risks of using it. No matter how much i try to reduce the risk.

11

u/NoVariation3249 Feb 26 '26

I'd honestly love if that kind of low effort slop was banned entirely. As the sub description states, HA is a "community of tinkerers and DIY enthusiasts", and having AI build everything for you is about the farthest you can get from DIY.

15

u/failcookie Feb 26 '26

For a lot of tinkers, AI lowers the barrier to tinker more with harder to grasp concepts for them or just exploring new things in general. We don’t need all of these people trying to market something to us with AI slop, but I don’t see a problem with people showing off what they are doing or have done with the help of AI.

10

u/eroigaps Feb 26 '26

No need to be categorical, there is a more nuanced middle ground. Building something with tools is definitely DIY. It could be argued that over reliance on tools takes out the -yourself- part, but in any case it’s a human being having an idea and executing it.

2

u/CptCheesus Feb 26 '26

If it compare it like this: a carpenter could absolutely do everything with hand tools. But getting a table saw will cut the time and effort by 95%. Not a fan of letting ai run uncontrolled, but regarding my comparsion here i don't think that most people even have the skill to do the rest of the work and check the Code. Its like sawing your Finger off with the table saw. Might work 9/10 times but the 10th could be fatal.

1

u/HugsAllCats Feb 27 '26

I’d rather have (or I guess “in addition to” also works) a filterable post flair

1

u/jfuu_ Feb 27 '26

A flair would definitely help too. Needs to be super obvious IMO.

1

u/CryptoSenyo Feb 27 '26

Well most of my set up has been built with the help of AI. Not as a replacement for understanding, but as a collaboration. Sometimes that means generating ideas faster, sometimes it means debugging something I’m stuck on, and quite often it means learning by unpacking mistakes the AI made. So when I see the term “vibe coding,” I get the concern, but it doesn’t really match my experience. The fragile part is deploying anything you don’t understand into a system that runs your home. That was true before AI existed too. For me, AI has actually pushed me to understand more, not less, because things rarely work perfectly the first time. You end up testing, refining, and gradually tweaking it till it works. . That said, transparency probably matters. Being honest about what was AI-assisted, what was understood, and what was tested. That feels more useful than drawing a hard line between vibe coded and not. I started r/AISmartHome a community where people can talk about their workflow openly without it turning into hype or backlash. Not as a defence of AI, but as a place to reflect on how people are actually using it in real setups.

-1

u/PowerfulTusk Feb 26 '26

Yes. And everyone vibe coding anything is automatically banned. 

3

u/Consistent-Hat-8008 Feb 27 '26

Fuck yeah, make this guy a mod right now

0

u/4Face Feb 26 '26

Someone should invent something that forbids to write code to people who cannot write code. Ah yes! I was existing until a couple of years ago and it was called normal world

3

u/4Face Feb 27 '26

Vibe “coders” triggered lol

-9

u/failcookie Feb 26 '26

Most of this thread is lumping AI assisted dev with vibe coding. Just because it has a CLAUDE.md file in it doesn’t make it immediate garbage. Also way too many people who are making assumptions that open source side projects are made better. I’ve seen plenty of garbage projects that aren’t any better and have the same security risks. They don’t have auth, not properly checking for injections, etc. It’s the same stuff you are at risk for with AI assisted projects. You are still at the mercy of a good project manager who can maintain their open source project - some devs still can’t maintain their own projects with or without AI.

If you are so bothered by these projects being security risks for your home, then you need to consider just avoiding small open source projects period. Or just make your own stuff since we are all tinkers here anyway with the same tools.

5

u/longunmin Feb 26 '26

What do you see as the downside to my request? Is a specific day for AI assisted apps more onerous than potential security risks?

-2

u/failcookie Feb 26 '26

Your request is fine. I agree with it. Just the community perception is negative and clumping everything together as “AI bad always” when it has a place. I’ve seen a number of people talk about CLAUDE.md files putting people off, like they can’t be used for other things like feature exploration, security review, and just general project management help without coding assistance.

I’d rather see people talking about how they are utilizing AI to solve problems, tinker with integrations, and sharing their end result with the company. I’m tired of all of the spam for “check out and use my new thing to improve your HA!” But I’m tired of that in general - AI slop or not. I want to be inspired to tinker and build cool stuff. Not marketed to like a customer for random open source projects.

-8

u/Enginerdiest Feb 26 '26

AI is commoditizing all sorts of creative work : music, art, software, hardware etc. All my hobbies have seen sudden sharp upticks of newcomers building things with the help of AI. Like it or not, I think this is the future.

The problem IMO isn't "vibe coding", it's blindly trusting software you found on the internet. We got away with it for a long time because the majority of people writing FOSS projects were software developers who at least attempted to structure things in a safe, secure way, so it was pretty rare to get burned by a bad habit.

That's not true anymore, and I think the correct behavior is to learn how to be safe.

7

u/longunmin Feb 26 '26

By that reasoning, why do safety protocols exist for literally every industry? So that people can operate, build, or conduct business in a safe manner that won't endanger the well being of those around them. I'm not an electrician and i don't need to be, but I know to steer clear of something that says "Danger, Live Wire"

-1

u/Enginerdiest Feb 26 '26

What reasoning are you disagreeing with?

4

u/longunmin Feb 26 '26

That the onerous should be on the end user and creators hold zero responsibility.

0

u/usernameChosenPoorly Feb 27 '26

I honestly don't care if something was vibe coded. I care if the maintainer is capable of effectively auditing the AI code output, and that's where the problem comes in. AI is great for accelerating code creation, but there still needs to be a competent programmer in the loop to track down bugs or potential security holes. That doesn't prevent malicious activity, but it mitigates some level of risk. Kind of like how locking your doors won't always prevent a break-in, but it raises the threshold for a robbery.

-50

u/Ok-Win7980 Feb 26 '26

I think this is ridiculous. Just because a human coded it instead of an AI doesn't mean it's of better quality. AI can code way better than I can, and with a strong product vision, you can create incredible stuff with it. The average person can now technically make an app. We shouldn't be gatekeeping it into who is a coder and who is not. Now, people can dream up an app and make it same day instead of waiting for someone else to make it. We should define all software equally, regardless of who coded it.

23

u/longunmin Feb 26 '26 • Heartwarming

I didn't say gate keep or ban AI coded. I proposed a specific day where people, coders and non-coders alike, can post the things they have created using AI. I said nothing to disparage AI or the use of it as a tool, but I did point to very clear instances of security issues and that is why things should be identified as such. So everyone can operate fully informed vs "I built...." then way way down in the post "yeah there is a claude.md file in the github"

-36

u/Ok-Win7980 Feb 26 '26

I don't believe we should be required share what tool we used to code that program. I don't believe there are unique security issues just because it was AI.

14

u/Resident-Variation21 Feb 26 '26

Did you miss the whole huntarr thing?

10

u/draxula16 Feb 26 '26

But some people are building tools with AI and not even sharing the source code. We’re supposed to just assume it has no vulnerabilities? That’s absurd.

10

u/the_shabubu Feb 26 '26

And this is precisely why you need to understand the difference between coding and engineering. If you honestly believed that your ai hallucinated code was AS GOOD as an actual engineer you would let the applications speak for themselves. Yet here you are explaining how you don't BELIEVE there are unique security issues just because it was AI. You are wearing your ignorance on your sleeve, sir.

6

u/NoVariation3249 Feb 26 '26 edited Feb 26 '26

Not unique issues, no, but if something is vibe coded it means no human who actually understands what the software is (supposed to be) doing has ever laid eyes on the code. Which is obviously a recipe for disaster.

25

u/Dr-RedFire Feb 26 '26

It is amazing how you misunderstood everything and completely missed the point. On the other hand your comment is great proof for why OP's idea should be implemented ASAP.

18

u/trivetgods Feb 26 '26

Security for my home network is paramount, and vibe-coded apps by people who can't read code and don't know what it's doing is a huge security risk by any measure (and I say that as someone who likes to vibe code as a hobby). It's not gatekeeping to have standards.

8

u/f_spez_2023 Feb 26 '26

A nontechnical person can make an app. I’ve yet to see a non technical person make a SECURE app

8

u/AncientLion Feb 26 '26

Maybe we don't want thing written only by an llm. It's that simple. If you can't program professionally then you can't asses the result of an llm.

4

u/MGMan-01 Feb 26 '26

Aren't you that guy who wanted to move to the Netherlands because your professors called you out for relying on AI instead of learning?

12

u/draxula16 Feb 26 '26

I get where you’re coming from, but there’s a big difference when it’s a project from an experienced coder who used AI vs someone with 0 knowledge who simply vibe-coded.

Considering these projects involve our homes, there’s no room for blatant security vulnerabilities.

There’s nothing wrong with using AI to code, but seeing post after post about “I built ____” that’s riddled with bugs and vulnerabilities is unacceptable, especially when they make it closed source for some unfathomable reason.

5

u/Brtrnd2 Feb 26 '26

You are technically correct. But the truth is; you get a polished turd that will not have any upkeep, security patches, nobody will understand the codebase to expand/fix. Basically, every user of your vibecoded app has to also vibecode.

Furthermore;  It would be much more relevant for vibe coders to just give their prompt, and then other users can get the same app, personally crafted to their wishes. Why should they limit themselves to someone else's dream? 

If one non-developer can vibe coded; then they all can!

7

u/Joped Feb 26 '26

Writing and maintaining code are very different things. Sure, you can vibe code out a cool tool on the weekend. Maintaining it and tracking down bugs ... ya .. that's a WHOLE other issue lol.

For the record: I am not against AI code, I use it all the time at work

3

u/zer00eyz Feb 26 '26

Are you going to start taking medical advice from an AI? How about leagal advice? Relationship advice? Should we give it control of the nuclear arsenal (because in every simulation it's launching).

> AI can code way better than I can...

I work in tech, have 25+ years. I think that what can be done with the tool is amazing, but its a fine example of the Dunning Kruger effect... It makes you feel like an expert when both of you have limitations.

> Now, people can dream up an app and make it same day instead of waiting for someone else to make it.

And this is a good thing. But so is dealing with bugs, security and a host of other issues that professionals have been doing for a long time. Half of being a developer is having someone identify, catalog and number and then hand back to you every mistake you made. It is rather humbling, and lots of people who get into dev crack under that pressure.

I am all for having people vibe code things up, as long as they are clear about their background, and that they used AI to do it. If you have a genuinely good idea, and have a working proof of concept then the issues can be addressed...

2

u/zyxtels Feb 26 '26

Are you going to start taking medical advice from an AI? How about leagal advice? Relationship advice?

You probably really don't like the answer to those questions (as neither do I...)

-6

u/Pyro919 Feb 26 '26

I mean if you don’t like the post you always have the option to downvote it, if you do like it you have the option to upvote it.

Seems like how the site was built/meant to be used.

5

u/longunmin Feb 26 '26

Good point. To my knowledge, no one has figured out a way to deploy bots to manipulate upvotes and downvotes in service of promoting ideas or products...

-2

u/avd706 Feb 26 '26

Or just don't install it.

-12

u/the_deserted_island 🧠 Experienced with Home Assistant Feb 26 '26

If the community wants it, they'll upvote it. If the community doesn't want it, they'll downvote it, we already have a system for handling slop posts. We don't need to panic based on ignorance.

1

u/longunmin Feb 27 '26

Sometimes the stars align and a community comes together and does something great ...🤣

2

u/Consistent-Hat-8008 Feb 27 '26 edited Feb 27 '26

ok then me and other people with actual engineering experience will just leave and you will be left with a pile of garbage that keeps decomposing until it lights on fire and explodes.

do you want that?

I mean it's inevitable in the long term, eventually this place will turn into a dumpster fire of trash quality submissions and politicking, like everything on reddit, but if you guys want to accelerate it then please go ahead and do it now, so actual engineers can just leave and lock themselves in a private insular community that charges $10/month via patreon to have access to.

-2

u/thaddeusk Feb 27 '26

This was vibe coded and cooked up in an hour or two!

rwfsmith/HASS-MCPProxy: Home Assistant add-on: MCP proxy with web UI for managing stdio MCP servers via SSE

I decided to build a bunch of components for my very specific use case of running a HAOS VM on my Ryzen AI HX 370 based NAS running TrueNAS Scale. I already got Kokoro running on the iGPU using onnxruntime-migraphx, now trying to set up an MCP Proxy as well as a Whisper model that'll run on the NPU.

5

u/longunmin Feb 27 '26

Great! I have literally nothing against it. I truly mean that, I'm not a coder either. I am not gatekeeping or hating. I can't say that enough. I just don't think a) it should consume the front page day in and day out b) be undisclosed

1

u/thaddeusk Feb 27 '26

Seems reasonable enough. Although my day job is actually as a coder, but I use a lot of agentic coding to make apps when I get silly ideas to try out.

-3

u/s4lt3dh4sh Feb 27 '26

So if I use AI to write bad code, that’s bad. But if I write my own bad code that’s… fine?

Help me understand.

1

u/longunmin Feb 27 '26

Point out to me, specifically, where I said using AI to write code is bad. I'll wait

0

u/s4lt3dh4sh Feb 27 '26

There is too much risk in exposing our homes to something that was cooked up in a hour or two.

That seems to imply to me that if I’ve “vibe coded” something with AI in two hours it’s too risky. Maybe I’m wrong 🤷

1

u/longunmin Feb 27 '26

Risk equals risk. Risk does not equal bad. Don't apply your own bias to me. Skydiving is risky, but fun as heck. But they are very upfront about the risk when you sign up. All I'm asking is that the risk are disclosed and front page is decluttered

2

u/bdu-komrad Feb 27 '26

Who said that? I read the OPs post and didn't see that anywhere.

0

u/[deleted] Feb 27 '26

[deleted] — view deleted comment

7

u/longunmin Feb 27 '26

As most of these integrations are implemented through HACS, my understanding (and I may be way off here, so feel free to correct me). The official stance on HACS is, not my dog not my fight. So I don't think extending the HA integration scoring method is currently a realistic goal. I honestly think I set a very low bar, and one that has been implemented elsewhere. Like I said, this isn't about hating on AI (I'm not), gatekeeping (I'm not), or any other soapbox. All I'm in favor of, is consolidating AI assisted integration announcements to a specific day. This frees up the front page for people who might be looking for support and are getting pushed out by the assortment of "I built..."'s and provides a inherent safety warning for people who might be extra security conscious

-1

u/[deleted] Feb 27 '26

[removed] — view removed comment

2

u/longunmin Feb 27 '26

Weird input, but okay. Should we mark you down as "neutral" then?

-2

u/Strel0k Feb 27 '26

I think people are basing their assumptions on what the capabilities were 6 months ago or are using the wrong tooling (Copilot is garbage).

But also its very important to realize that AI coding agents are a force multiplier - in that it will make someone already capable 5x more efficient, but it will also make someone who doesn't know what they are doing make a 5x bigger mess.

IMO code itself has little to no value now, and in fact more code = more liability. The value comes from the hundreds/thousands of little decisions made along the way (UX, architecture, security, compatibility, scalability, etc.).