News for hackers. Stuff that matters.

A comment on Your Supabase Is Public. Parent comment

Re:Your Supabase Is Public by x0x0 on Monday December 22, 2025 @02:05PM (#46357529)
My experience is watching a colleague use lovable which will mostly ignore security. Sure, if you prompt it the system will do something which seems correct, but it will also happily undo that as well.

eg I was trying to help her set up a webhook listener, and it undid our efforts.

These tools seem incapable of building software in the hands of users who don't understand security already.

[ Parent | on HN ]
Re:Your Supabase Is Public by embedding-shape on Monday December 22, 2025 @02:12PM (#46357624)
> These tools seem incapable of building software in the hands of users who don't understand security already.

These tools are for augmentation of skills, not for wholesale "imma a programmer now", which a lot of people seem to think. And to be honest, lots of companies are selling that "experience" too, even though they know it isn't true, a bit shit.

[ Parent | on HN ]
Re:Your Supabase Is Public by x0x0 on Monday December 22, 2025 @02:46PM (#46358074)
It's definitely pushed as not needing an engineer.

My colleague now understands why unit tests, after watching subsequent development regularly break previous work. Lovable doesn't support them. And I don't want to touch this codebase because I don't want to own it.

[ Parent | on HN ]