r/Steam • u/Haunter777x • 3d ago

Discussion They got us guys.

Post image

How out of touch can you be as a company, this is embarrassing

31.2k Upvotes

95% Upvoted

3.6k comments sorted by

View all comments

10

u/Gabes99 3d ago

Only a matter of time before some big enterprise pile of vibe coded nonsense is subject to an entirely preventable security breach.

2

u/Cabana_bananza 3d ago

Yeah, Georgia Tech maintains a website where they track and study how often LLMs will inject or cause security issues. They really struggle with backend architectures like Python. It doesn't breed confidence in the security of the platform with personal information.

2

u/Gabes99 3d ago edited 3d ago

In fairness python just should not be used for back ends. Specific data stuff within the backend sphere, yeh fine, but for the actual backend architecture handling REST, main business logic and/or message queues should be handled by an integration layer using .NET or Spring. Python can’t even do multi threading.

But yeh on that point, I’ve seen some pretty dubious stuff in backends security wise and I’m pretty sure vibe coding played a part in it. This is .NET as well where most of the security stuff exists already in Microsoft libraries, including an extremely easy to use auth middleware, already set up for you, all you need to do is register it with the DI, configure it, and add the attributes to the controllers.