Re:Lovable apps expose passport details and more than 200K p...
by neathack on Saturday November 14, 2026 @02:40PM
(#50500074)
I should also mention that the analysis was conducted in collaboration with a lawyer specializing in data protection and ethical hacking.
[ Parent
| on HN ]
Re:Lovable apps expose passport details and more than 200K p...
by jacquesm on Saturday November 14, 2026 @02:44PM
(#50500110)
That's an important bit of information that probably should make it into the blog, and I hope you guys made the right call, but I think that that is probably not the case. Best of luck.
oh: "What isn’t mentioned in the analysis is that we ran a System 1 decision model on each dataset to determine whether it contained privacy-sensitive data."
I hope at least that that was a local model. If not you've made things considerably worse.
Re:Lovable apps expose passport details and more than 200K p...
by neathack on Saturday November 14, 2026 @02:57PM
(#50500220)
It’s mentioned in the Handelsblatt article linked in the blog post. Since the lawyer was brought in by the newspaper, we didn’t mention their involvement in the post.
All LLM-based analysis was performed using local models, specifically the "elephant-1" model on our local RTX Pro 4000 SFF.
I respect your insistence on proper data handling—you’re right to expect it—and we tried to be as careful as possible when conducting the analysis. Now let’s hold Lovable to the same standard.
Re:Lovable apps expose passport details and more than 200K p...
by jacquesm on Saturday November 14, 2026 @03:34PM
(#50500548)
The lawyer that was brought in by the newspaper was making sure the newspaper wouldn't end up being liable. The only lawyer whose advice you should take is the one that you pay.
Re:Lovable apps expose passport details and more than 200K p...
by voxic11 on Saturday November 14, 2026 @03:50PM
(#50500685)
As long as they are representing someone I think lawyers have the same obligations regardless of who actually pays them or if they are receiving any payment at all.
Re:Lovable apps expose passport details and more than 200K p...
by jacquesm on Saturday November 14, 2026 @03:59PM
(#50500748)
Yes, this is true, but that requires there to not be any conflict of interest, which is really not all that clear-cut in situations like these.
Re:Lovable apps expose passport details and more than 200K p...
by trollbridge on Sunday November 15, 2026 @11:07AM
(#50508002)
And a lawyer would make that decision and immediately decline to give advice once they find a conflict of interest between joint clients.