Lovable apps expose passport details and more than 200K private messages

Re:Lovable apps expose passport details and more than 200K p... by ivan_gammel on Saturday November 14, 2026 @03:23PM (#50500443)

I strongly disagree with the second part. Building public app should not require same level of skill as flying an airplane. Not even the same as getting a driver license. It had to be simple, secure and compliant.

The problem are product managers and engineers who build things like Lovable, that are not secure by design. Those products have no right to exist, but their alternatives could exist and let their users focus on what matters, instead of paying web development tax.

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by vibebingo on Saturday November 14, 2026 @10:19PM (#50503665)

When the number of things you can possibly build is infinite and LLMs are not guaranteed to catch security issues you need some skill or you constrain what can be built to a subset. I.e. build a platform where users own their data and it is partitioned and the slop runs atop that. Similar to running the slop on an airgapped laptop.

The plane analogy would be selling tickets to passengers. Who then don't need a pilot license to get somewhere.

[ Parent | on HN ]