News for hackers. Stuff that matters.

A comment on OBS Studio 33. Parent comment

Re:OBS Studio 33 by no-name-here on Saturday October 24, 2026 @07:50AM (#50220400)
Did you mean to reply to my comment? Was your issue with the original claim that lack of sanitization *"required"* "vibe-coded" functionality, or with someone disagreeing with that and pointing out how lack of sanitization can and does happen even for code that is 0% related to vibe-coding or LLMs (let alone "requiring" vibe-coding for it to occur)?
[ Parent | on HN ]
Re:OBS Studio 33 by spankalee on Saturday October 24, 2026 @10:30AM (#50221592)
Read where "required" was in the comment you're flipping out about: it didn't say that the software had to be vibe coded, just that it was.

The RCE was caused specifically by a custom Claude generated overlay, so finding the RCE did require using this vibe coded software.

[ Parent | on HN ]
Re:OBS Studio 33 by Forgeties79 on Saturday October 24, 2026 @10:48AM (#50221799)
I did and I think you’re just coming across as very eager to defend LLM’s. Totally possible I am misreading your intention though
[ Parent | on HN ]
Re:OBS Studio 33 by adrianmonk on Saturday October 24, 2026 @01:42PM (#50223442)
> the original claim that lack of sanitization "required"* "vibe-coded" functionality*

That claim was ever made. The comment was about actual pieces of software that exist in the real world, not about all possible software that could exist in theory.

In real-world usage, for a user to be exposed, a necessary ingredient was to use a particular piece of software that actually exists and that happens to be vibe coded.

That does not preclude the possibility that a non-vibe-coded piece of software could have been vulnerable. It's just that such a piece of software did not happen to exist.

So why even mention vibe coding? Presumably it's relevant for some other reason. Perhaps the implication is this vibe-coded software is not an established piece of software with lots of users. (Since vibe-coded software is easier to create, maintainers may be less invested in it or committed to maintaining it. Vibe coding changes the economics and opens up the possibility of creating throwaway software.) Or perhaps the implication is that users should be more careful about using vibe-coded software.

[ Parent | on HN ]