this post was submitted on 07 Nov 2026
651 points (89.1% liked)
Technology
89639 readers
2604 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If you are developing software with financial impact, and every developer downloads their dependencies from the internet without further checks, you already have set up yourself for desaster.
If you would ask a LLM for how to guard yourself against malicious dependencies, this would be one of the first things they'd point out.
Also crazy how they are just allowed to “indulge” themselves with vibecoding on a machine that can access live production servers.
Yeah, just doing shit without worrying about things like security is a core part of vibe coding. Vibecoding as a concept put into practice is definitely to blame.
I think the same "professional" environment where whomever made the decisions for systems architecture thought that Production systems that deal with a shitton of money should be in the same network as machines which aren't locked down like crazy and whose users can install whatever the fuck they want, is the kind of environment where people thinks vibe coding is great.
Incompetent idiots leading incompetent idiots.
If you don't know enough to write the code yourself, you likely also don't know enough to ask the right questions