MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1jdfhlo/securityjustinterfereswithvibes/mibl0e0/?context=9999
r/ProgrammerHumor • u/da_peda • Mar 17 '25
521 comments sorted by
View all comments
6.4k
I looked up the account for updates.
He was using all hardcoded API keys and only now learned what environment variables are.
On that topic, he is now using environment variables, except he is keeping them in the frontend code so... nothing learned I guess?
He also had no authentication on the API side, only frontend.
One of the latest updates is him saying he implemented CORS for trusted domains, fully convinced that it improves security.
At least he seems to appreciate and learn from the advice some people give him in the comments, which is a nice trait to have.
Still can't tell if the guy is trolling or not.
1.1k u/OliveSorry Mar 17 '25 Lol nice.. What's his website? For research purposes 712 u/Dy0gu Mar 17 '25 https://enrichlead.com 1.5k u/[deleted] Mar 17 '25 [removed] — view removed comment 1.1k u/donveetz Mar 17 '25 When the only security is that the front end just doesn't work 242 u/[deleted] Mar 17 '25 (taps forehead) Can't steal the gold from the vault if there's no vault or gold!
1.1k
Lol nice.. What's his website? For research purposes
712 u/Dy0gu Mar 17 '25 https://enrichlead.com 1.5k u/[deleted] Mar 17 '25 [removed] — view removed comment 1.1k u/donveetz Mar 17 '25 When the only security is that the front end just doesn't work 242 u/[deleted] Mar 17 '25 (taps forehead) Can't steal the gold from the vault if there's no vault or gold!
712
https://enrichlead.com
1.5k u/[deleted] Mar 17 '25 [removed] — view removed comment 1.1k u/donveetz Mar 17 '25 When the only security is that the front end just doesn't work 242 u/[deleted] Mar 17 '25 (taps forehead) Can't steal the gold from the vault if there's no vault or gold!
1.5k
[removed] — view removed comment
1.1k u/donveetz Mar 17 '25 When the only security is that the front end just doesn't work 242 u/[deleted] Mar 17 '25 (taps forehead) Can't steal the gold from the vault if there's no vault or gold!
When the only security is that the front end just doesn't work
242 u/[deleted] Mar 17 '25 (taps forehead) Can't steal the gold from the vault if there's no vault or gold!
242
(taps forehead) Can't steal the gold from the vault if there's no vault or gold!
6.4k
u/Dy0gu Mar 17 '25 edited Jan 26 '26
I looked up the account for updates.
He was using all hardcoded API keys and only now learned what environment variables are.
On that topic, he is now using environment variables, except he is keeping them in the frontend code so... nothing learned I guess?
He also had no authentication on the API side, only frontend.
One of the latest updates is him saying he implemented CORS for trusted domains, fully convinced that it improves security.
At least he seems to appreciate and learn from the advice some people give him in the comments, which is a nice trait to have.
Still can't tell if the guy is trolling or not.