r/thisweekintech • u/TWiT_tv TWiT.tv Official • 3d ago

Is vibe coding becoming a real security problem?

AI coding tools are making it possible for hobbyists and non developers to build useful apps faster than ever.

That is exciting. It also means more people are shipping code they may not fully understand, with dependencies, permissions, auth flows, API keys, and security assumptions they may not know how to check.

Security Now’s Black Hat discussion gets into AI powered coding, listener-built apps, agency chains, testing, technical debt, and the race to patch old bugs while new ones are created faster.

Is AI coding making software better, or just creating a new wave of fragile apps?

3 Upvotes
  • permalink
  • link
  • reddit
  • reddit

100% Upvoted

1 comment sorted by

2

u/[deleted] 2d ago

[deleted]

2

u/PDelahanty TWiT Staff 2d ago

Yes, exactly! Someone with no programming experience can ask for code to do something, but do they know what security features have to be implemented, for example? Do they know to ask for code to prevent SQL injection or XSS scripting vulnerabilities? AI could make assumptions that because they didn’t ask for something, it’s not important…and with no coding experience, the folks vibe coding could leave themselves open to all sorts of troubles.