Vibe Coding’s Huge Problem

In this episode of Syntax, Wes Bos and Scott discuss the dangers of "vibe coding," particularly regarding authentication and access control. Wes shares a personal anecdote about an AI tool suggesting insecure client-side authentication and highlights the T-App security breach as a cautionary tale. They offer tips for developers, such as avoiding vibe coding for access control, adopting a "lock down by default" approach, clearly distinguishing between server and client-side code, visualizing access control, and automating tests. The hosts also share "sick picks," with Wes discussing hotel scent collections for home fragrance and Scott recommending the book "A City on Mars."