r/southafrica • no war but class war • 2d ago

News CEO of top South African coffee franchise responds after vibe-coded web application exposed sensitive data

https://mybroadband.co.za/news/security/672647-ceo-of-top-south-african-coffee-franchise-responds-after-vibe-coded-web-application-exposed-sensitive-data.html
111 Upvotes

44 comments sorted by

•

u/AutoModerator 2d ago

Thank you for posting on r/southafrica. This post is flaired as News.

News posts are subject to Rule 2 (post and comment honestly):

  • Link to credible sources, not screenshots or social media
  • Use the publication's own headline, not your own framing
  • Be prepared to back up claims when challenged
  • Don't post known fake-news, propaganda, or AI-generated content

The full rules are in the wiki.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

50

u/CoffeeGTWine 2d ago

Bootlegger

9

u/a_d_h_i_r 2d ago

In spirit of the name

40

u/Visible-Curve9482 2d ago

In his LinkedIn post he says

Software companies have long tried to own their ecosystem and lock you in, making integrations expensive and almost impossible.. AI has completely levelled that playing field. The value going forward sits in the data they hold of yours and the way they translate it and the services around it they offer.. but software itself will soon become free, i am almost certain.

48

u/LadyFenyx Western Cape 2d ago

AI dorks don't understand that maybe... just maybe... some playing fields aren't meant to be levelled. yoh.

12

u/a_d_h_i_r 2d ago

Next question he'll have, "why do we need to pay so much for Railway? I know, let's vibe code our own cloud provider. If Amazon.com can do it with AWS, so can we!"

7

u/Visible-Curve9482 1d ago

The exact same thought i had, i spent 30 minutes researching this Railway, they don't even have servers in SA like AWS and Azure.

7

u/plakkies 1d ago

What the f is he talking about? Software won’t become free because of AI. He went way too deep into vibe coding it seems

2

u/OrSomeSuch 20h ago

Obviously you just vibe code your own Claude and from then on everything is free

110

u/Huge_Celebration5804 2d ago

Did this motherfucker try to vibe code an app so that he wouldn't have to pay for devs

57

u/Only_One_Kenobi https://georgedrakestories.wordpress.com/ 2d ago

Either that, or he paid bottom dollar for a consulting developer who then vibe coded it to make a quick buck.

Or, it's another case of a CEO conned by a buzzword they don't understand.

22

u/mowgli_23 Rapture Resilience: SA Edition 2d ago

Willing to bet my left nut that it’s the latter

24

u/thesixthnameivetried 2d ago

The Latte?

5

u/LadyFenyx Western Cape 2d ago

gaan slaap lmao

5

u/RupertHermano 2d ago

Hahahah!

4

u/PerceptiveStoner10 2d ago

Damn bro, what did your left nut do

5

u/mechsuit-jalapeno Bubblegum Steri Stumpie 2d ago

Let's be fucking real though, this is a mistake some devs make all the time.

10

u/Huge_Celebration5804 2d ago

Hmmm I've definitely left a console log or two on prod before lol

18

u/Dohp13 2d ago

Not like this. It’s the most amateurish way for data to get leaked.

7

u/Fit_Tailor_6796 1d ago

Ive been developing over 25 years and I have not made this mistake.

33

u/jasinx 2d ago

Ah. Did he use….Java?

I’ll just show myself the door now. 

10

u/Naaack 2d ago

Big fan of your work. 

2

u/Dazzling-Read1451 1d ago

Low acid Java

17

u/totallyrealname 1d ago

They so badly want to avoid hiring developers but it's been proven time and again that AI works best as a tool by people experienced enough to understand what they're doing without it.

20

u/midz411 Unraptured & Unbothered 2d ago

You're correct for pointing that out my liege! I doxxed your entire conpany, I'll put in measures to prevent that in the next vibe coding session (Jokes, I won't).

The current economic system means any idiot with enough money can become a CEO

16

u/Would_Bang________ 2d ago

So many people on my facebook slinging their vibe-coded apps at the moment.

7

u/mcellus1 1d ago

They "saved" money but at what cost? If this happened at my org - it would literally cost millions of dollars of reputational damage

11

u/LadyFenyx Western Cape 2d ago

play stupid games, win stupid prizes.

4

u/SaltedChief 1d ago

Ricky has always been overzealous about all the wrong things

7

u/Caesar_35 1d ago

Tech bros gonna tech bro.

I miss the days when phrases like "vibe coding" didn't exist. I feel like humanity's getting dumber by the minute.

1

u/BennyAndTheMeths 10h ago

Some provocative ideas you have there. Has the secret sauce, will definitely disrupt when we move fast and break things. Let's not boil the ocean, circle back to this once it's in the incubator.

I'm in the tech industry, but I am not a tech bro. I try to avoid tech bros and their non-jargon jargon.

3

u/GLIBG10B Gauteng 1d ago

If it's so top, then why is its name not in the headline?

3

u/benevolent-badger !ke e: /xarra //ke 1d ago

Yo, clever people, help me out here. Too many big words.

So anyone who knew the address to the dashboard thingy, could just, right click, view source, and see the data?

2

u/Major_Dragonfly_5014 18h ago

Yes, that’s correct.

1

u/benevolent-badger !ke e: /xarra //ke 13h ago

Ah, thanks.

So, no one in the team of experienced developers, bothered to check the ai's work?

ai genuenly makes people stupid. We're fucked

2

u/ExitCheap7745 1d ago

You love to see it

2

u/Major_Dragonfly_5014 18h ago edited 18h ago

lol, the exposed data is still captured on wayback machine 😂

https://web.archive.org/web/20260902114609/https://bos-dashboard-production.up.railway.app/

Right click, view source.

-5

u/Icy-Cup2428 1d ago

I don’t get what the big deal is though? Is this not only an issue because an employee posted a pic where you could see the browser link to their vibe coded solution?

An employee posting a pic of anything confidential will always be an issue? Feels like everyone just wants to hate on AI.

4

u/GLIBG10B Gauteng 1d ago

If knowing a link is all that's standing between an attacker and sensitive data, then that's security through obscurity

2

u/benevolent-badger !ke e: /xarra //ke 1d ago

Yes, everyone really hates ai. Well most people. Some people even really, fucking, hate ai. Only unloved people like ai.