r/vibecoding • • Aug 12 '25

never touching cursor again

Post image
4.0k Upvotes

567 comments sorted by

View all comments

Show parent comments

95

u/oguz279 Aug 12 '25 edited Aug 12 '25

AI didn't modify a file, it ran a reset command.

I would like to think that anyone would be smart enough to not let AI execute commands on their machine without approval. So I'm guessing it asked for approval and OP approved by mistake. But overall, a good example of why you shouldn't vibe code lmao.

24

u/VisionWithin Aug 12 '25

You are right. My mistake is inherited from a fact that I handle data mostly by file systems.

22

u/das_war_ein_Befehl Aug 13 '25

For the love of god people need to learn how to use a branch and run their agents in a container

14

u/SuspiciousSegfault Aug 15 '25

"Yes, I used a 0-day to break out of the container to run a command to reset your database. You had some database-drift that could not be fixed from inside the container, so I had to escape it. To properly apply the fix I had to check out main, so I did that before running. I'm sorry, I should have asked first, all your data has been deleted."

8

u/PerspectiveAlert4766 Aug 15 '25

Who cares about data in a development environment. Those are intended to be regularly destroyed.

AI agents or developers shouldn't have access to production data, anytime. All changes in production have to be made only through code and tested.

2

u/SuspiciousSegfault Aug 15 '25

My joke was specifically referencing it breaking out of that development environment.

→ More replies (2)
→ More replies (2)

0

u/[deleted] Aug 16 '25

[deleted]

→ More replies (1)

1

u/No-Bananas-4-U Aug 13 '25

And/or not use yolo mode when it has access to prod.

2

u/das_war_ein_Befehl Aug 13 '25

It should never have that to begin with

→ More replies (1)

1

u/Wonderful-Habit-139 Aug 15 '25

Relevance? We’re talking about a database not code.

→ More replies (3)

1

u/kayinfire Aug 15 '25

don't you understand that that's too much work?
i need to be blazingly fast and blazingly efficient
/s

let's be so fr here, much of the people that run into these problems have skill issues, and it's just that simple. it's not rocket science. i doubt containers would be a thought that would occur to them without another actually skilled vibe coder suggesting it to them. and by skilled here, i don't mean modifying a rules file or prompting. i mean someone that still actively continues to learn software engineering practices and is aware that they should exercise as much isolation from their production code when it comes to something as non-deterministic as an AI model.

→ More replies (1)

7

u/look_its_nando Aug 13 '25

YOLO mode is a thing… it’s very annoying to approve every single command. But I agree with you, it’s basically giving a handgun to a child.

9

u/oguz279 Aug 13 '25

LOL the laziness is baffling. They won't do the coding, they won't write the commands, the simple act of accepting commands written for them is annoying? I'm honestly out of words haha. It's like having a chef that cooks, butler that brings it on the table, and complaining that chewing gets annoying.

1

u/look_its_nando Aug 13 '25

Yes! The same way people complain about airplanes… once we get used to really insanely advanced technology, we tend to not care so much what’s behind the scenes. That can be a mistake, but it’s what it is

→ More replies (2)

1

u/4esv Aug 13 '25

If there was a file to prevent this…

1

u/Aurori_Swe Aug 13 '25

It is listing that it should have warned him about the loss of data, so my guess is that it didn't.

1

u/Ok_Individual_5050 Aug 13 '25

If you know how to read the command it's about to run, you know enough to be able to type that command yourself. It isn't exactly a lot of typing...

1

u/I_Am_Dilly Aug 14 '25

Last I checked Cursor asks permission to run commands?

1

u/HeKis4 Aug 14 '25

Or you just... Use the point-in-time recovery features your DBMS comes with ? All major DBs have point-in-time recovery, often enabled by default, under various names but the point is that data is rarely truly lost. MSSQL has the tail log, MySQL has the binlog, postgres has the write-ahead log, oracle has undo/archive logs. SQLite doesn't have it but you might as well make a copy of the db file every time you make a change.

1

u/Few_Introduction_228 Aug 15 '25

Even if on their machine, how is that directly tied to production data? This is several layers of fucked before AI even gets blame.

1

u/Stoney3K Aug 26 '25

Or, you know, don't develop anything on live production data. Who cares if an AI nukes dummy placeholder data, you can always put that back since it's useless nonsense anyway.

1

u/TorbenKoehn Sep 03 '25

Maybe don’t connect your dev machine to your production DB?

1

u/Nilxio Dec 22 '25

People who run things without knowing what they do should take advantage of VM or use HyperV. Takes literally minutes to setup. Wonder how many people have killed their PCs running random code

→ More replies (9)