News for hackers. Stuff that matters.
Re:Lovable apps expose passport details and more than 200K p... by reassess_blind on Sunday November 15, 2026 @01:17AM (#50504465)
The whole proposed benefit of their "query the database from the client" concept was the speed and ease of development. If you need edge functions (cost per invocation too, mind you) to make this happen, it's just a terrible design in general.

I agree. If AI agents are doing all the code anyway, as is the case with Lovable, just turn off the Data API entirely and access the DB from the backend only like a typical Postgres setup.

There are no comments on this comment yet.