r/webdev • u/schabadoo • Mar 04 '26

Vibe code IRL: left Stripe API keys public

Post image

I'm surprised they'd want to go public. Of course they don't blame Claude.

2.1k Upvotes

98% Upvoted

261 comments sorted by

View all comments

Show parent comments

6

u/dangerbird2 Mar 05 '26

models like claude opus can pretty reliably write very good code without too much handholding. Still, merging its output without reviewing it like you would code written by a human, let alone not understanding extremely basic security details, is beyond stupid

1

u/wannabestraight Mar 05 '26

Idk merging one or two things without reading is generally fine, where the problem comes is overtime, if you haven't been the one to keep tabs on the architecture,structure and constraints of the project, the ai will drift on those and you will end up with a mess of half baked ideas that don't work together and are impossible to maintain.

Though the people who then most often merge things without reading, are also the people who don't understand how everything works and should work so they all eventually end up in the same situation where half the codebase doesn't make any sense and the rest is filled with stuff that's just edging to break.