Lovable apps expose passport details and more than 200K private messages

Re:Lovable apps expose passport details and more than 200K p... by Leynos on Saturday November 14, 2026 @04:05PM (#50500808)

Why do I only ever hear about Supabase in the context of people getting fucked?

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by sgarman on Saturday November 14, 2026 @05:02PM (#50501416)

I think part of it is because they often just the default answer the LLMS spit out when making these projects.

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by schrodinger on Saturday November 14, 2026 @08:40PM (#50503134)

There's also a whole thread about some "bad defaults" they have as well. I won't recite it, take a look: https://news.ycombinator.com/item?id=50499905

[ Parent | on HN ]

Re:Lovable apps expose passport details and more than 200K p... by socketcluster on Sunday November 15, 2026 @12:23AM (#50504255)

It's not an appropriate solution to for AI vibe coding IMO. It's too complex. People without a technical background need a simpler abstraction than RLS.

[ Parent | on HN ]