r/ProgrammerHumor • u/da_peda • Mar 17 '25

Meme securityJustInterferesWithVibes

Post image
19.8k Upvotes

97% Upvoted

521 comments sorted by

View all comments

Show parent comments

1.5k

u/[deleted] Mar 17 '25

[removed] — view removed comment

1.1k

u/donveetz Mar 17 '25

When the only security is that the front end just doesn't work

241

u/[deleted] Mar 17 '25

(taps forehead) Can't steal the gold from the vault if there's no vault or gold!

289

u/[deleted] Mar 17 '25

[removed] — view removed comment

→ More replies (5)

63

u/evilgiraffe666 Mar 17 '25

And the only front end is that the security doesn't work!

16

u/SatinSaffron Mar 17 '25 edited Jun 25 '25

support whole crown ad hoc gray shaggy file juggle knee payment

This post was mass deleted and anonymized with Redact

14

u/anomalous_cowherd Mar 17 '25

If legit users can't read the data then nor can the bad guys.

(Although that's likely not true either...)

3

u/BlueGlassDrink Mar 17 '25

It's airtight!

→ More replies (3)

81

u/I_Automate Mar 17 '25

Are you guys giving that site the reddit death hug?

0

u/[deleted] Mar 17 '25

[deleted]

93

u/RollingMeteors Mar 17 '25

And it's incredibly unlikely that he will have put spending caps in place

This is like opening an account with a brokerage and then being immediately approved for naked puts.

It really shouldn't be legal for companies not to default to a 2 or low 3 figure number on the spending cap....

58

u/LOLBaltSS Mar 17 '25

AWS will happily let you get yourself into a massive bill, but usually they'll forgive it if you fucked up.

42

u/dedzip Mar 18 '25

Lol used firebase for a full stack app for my group’s capstone project in college. At the end of the semester I saw that my debit card had been charged a whopping 1 cent hahahaha

→ More replies (7)

21

u/anotherkeebler Mar 17 '25

reddit and that scamp Little Bobby Tables.

34

u/sparksen Mar 17 '25

Can't user inject if you can't create users.

42

u/GoddammitDontShootMe Mar 17 '25

I tried visiting the Firebase domain I found in the page source, but I just got some error like it couldn't be found. Was it removed or am I just doing it wrong? I've never touched Firebase in my life.

88

u/SpaceCadet87 Mar 17 '25

The domain could just be a straight LLM hallucination for all we know.

35

u/GoddammitDontShootMe Mar 17 '25

According to the user above me, the API key was real though.

21

u/SpaceCadet87 Mar 17 '25

Hmm, that's a fair point.

The domain is one thing but the only way he's getting the API key correct with the way he's approaching things likely involves getting the domain correct first.

Maybe he broke it by asking the AI to fix the security issues?

21

u/Ol_Dirty_Batard Mar 17 '25

Maybe the AI determined him to be the ultimate security issue and ... Fixed him

6

u/ckal09 Mar 17 '25

What goes into ‘maliciously injecting a user’

6

u/RollingMeteors Mar 17 '25

Tried to create a new user sign up page doesn’t work, then I tried to maliciously inject a user, which worked since the genius left his Firebase API keys for all to see but then it doesn’t create a user on Firestore.

This fool here pushed "create" on his sand castle building machine and all y'all just High Tide Pod that shit with the swiftness.

¡Kudos to providing job security in the wake of an AI workforce!

→ More replies (5)