Lovable apps expose passport details and more than 200K private messages

Re:Lovable apps expose passport details and more than 200K p... by Oras on Saturday November 14, 2026 @01:38PM (#50499542)

One might argue that data breaches been there way before AI, the difference with these AI generated apps is:

- They are an easy target, they don’t need any sophisticated hacking knowledge (article mentions inspecting network calls in browsers).

- There tons of those, and more created everyday. For the average user, they don’t know what they are using, or how risky it can be.

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by neathack on Saturday November 14, 2026 @01:46PM (#50499625)

I can confirm that no advanced hacking techniques were used, and anyone with a moderate understanding of how the web works will be able to reproduce the results.

The initial idea behind the analysis was to start with the most basic setup and then move on to more sophisticated attacks. We never reached that second part, as so much sensitive data was already out in the open.

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by PaoloBarbolini on Saturday November 14, 2026 @03:06PM (#50500303)

Some don't even need to be hacked. The person just thought they didn't need a login and left everything open.

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by cprsimpson on Saturday November 14, 2026 @04:30PM (#50501059)

The bar being vastly lowered is the qualitative difference that AI pushers don't seem to appreciate. At their root, many of the issues we currently see with AI are really cultural/procedural issues that have existed in the industry for a long time, but AI has dumped napalm on the dumpster fire and the neighborhood is now catching fire.

[ Parent | on HN ]