6h ago · 6 min read · Over the last few weeks I've been running VibeScan — a security audit tool for AI-generated codebases — against a small set of public Lovable / Bolt / v0 / Cursor apps. Same dozen issues keep surfacing. If you're shipping a vibe-coded SaaS, run throu...
Join discussion1h ago · 6 min read · Prompt engineering is dead. Nobody told you because the influencers still sell courses on it. The real skill in 2026 is context engineering — the discipline of deciding what information, tools, and memory go into the model's window on every single tu...
Join discussion17h ago · 3 min read · This week i studied javascript and types at Mctaba. I have been writing Typescript professionally for years but going back to javascript fundamentals taught me something i had been taking for granted.
Join discussion4h ago · 6 min read · So you wake up, check Hacker News with your morning coffee, and see that your deployment platform just confirmed a security breach. Hackers are reportedly selling stolen data. Your stomach drops. I've been through this exact scenario twice in my care...
Join discussion
4h ago · 6 min read · Yesterday I ran VibeScan — my security-audit tool for AI-generated SaaS — against 9 public apps built on Lovable / Bolt / v0 / Cursor. Different verticals: healthcare (patient records), finance (AI script-for-sale platform), productivity (logic/notes...
Join discussion11h ago · 5 min read · Introduction Modern web applications often default to architectures with APIs, databases, and server-side logic—even when those layers aren’t needed. While working on a side project I asked: Can we bu
Join discussion5h ago · 6 min read · Every week I audit a handful of AI-generated apps (VibeScan is the service behind this). The single most common "how is this in production" finding is a broken Row Level Security policy. Usually it's one of: RLS is disabled and the table is just pub...
Join discussion21h ago · 4 min read · Most developers ship AI features without looking at the bill. Then the bill arrives, and it's five figures. Here's the part nobody tells you: up to 45% of your tokens are pure fluff. Filler words, restated questions, "As an AI assistant...", apologie...
AArchit commented
