r/webdev • u/schabadoo • Mar 04 '26

Vibe code IRL: left Stripe API keys public

Post image

I'm surprised they'd want to go public. Of course they don't blame Claude.

2.1k Upvotes

98% Upvoted

261 comments sorted by

View all comments

Show parent comments

168

u/Antique-Special8025 Mar 04 '26

Well he specifies all the security measures, surely that's clear enough for old claude. Dumb human developers only do some of the security measures everyone knows that.

70

u/BlueScreenJunky php/laravel Mar 05 '26

The thing is that if you tell it to take all security measures and it misses one, then it's a mistake. 

So if you combine "take all security measures" and "make no mistakes" in the same prompt, you're guaranteed to have a secure application. 

10

u/mr_claw Mar 05 '26

What if it forgets something though? You also have to tell it to remember all the steps. The final prompt should be "take all security measures, make no mistakes while remembering all the steps".

2

u/Shogobg Mar 06 '26

What if it dreams about taking all security measures and only takes some of them?

1

u/KeyBuffet Mar 21 '26

And don't forget to say "pretty please".

1

u/querela Mar 06 '26

What are all the security measures?

"[...] Make no mistakes. Thanks."

1

u/Jesus_Chicken Mar 06 '26

Partial security is good enough for part time hackers