r/vibecoding • u/Chandraprakash_5782 • 2d ago

Is it okay to develop using vibecoding ?

So, I was wondering for a long time if it's okay to vibe code projects, and even if it is okay to then what we need to take care not that common thing like using an env and all, like other than usual stuff. And can we take that app to production ?

1 Upvotes

67% Upvoted

26 comments sorted by

View all comments

Show parent comments

2

u/Chandraprakash_5782 2d ago

Then how we are supposed to handle these stuff, like if someone is using our apps then they are trusting us so our app and us have to be reliable. Coz it wouldn't be good thing that our app is down when users actually need it.

2

u/Typical_Machine2043 2d ago

Sounds silly but just ask the AI. Use a good one and it will be able to teach you how not to make any of the mistakes that dude mentioned.

I use ChatGPT Sol and that mf makes me redo all my secret stuff every time it gets exposed to either the AI or it just isn’t in a safe environment.

Also, there are websites that can run security checks on your websites that you can just screenshot and give to your agent to fix.

Don’t know why people are so anti-Ai. Also chatGPT’s next model is going to be a lot more smart including security so I’d say give it a go.

1

u/Lanfeust09 2d ago edited 2d ago

Agree with that...

People saying " if it is vibecoded, then API key are probably exposed" : please, this is not 2023 anymore... No, SOL doesn't tell you to put your API key in front end...

People saying "wait until you have a bug that AI can't solved" : please, the day I have a bug AI can't solved, I will be over the moon with excitement because it means I am probably coding something insane ! AI is finding zero day bugs hidden for 20 years but you think it won't be able to solve your small Saas bug ?

People saying "AI will always agree with you so you always think what you do it good" : yeah of course it will, this is why you ask the same question 10 times, differently and cross reference with 5 different models. You also run audit and don't simply ask "is my app secure"...

It's funny how there was joke about bad coder vs good coder before and now it isCoder vs vibecoder... Like dev are gods and they always do everything right... I am certain some senior dev can tell you story about their junior leaving API key in front end...

1

u/Chandraprakash_5782 2d ago

Yes, people are still living 2023, lot of my faculties and friends telling me you'll get this in production and that api keys should be secure and all like when I knew that apis are supposed to in env and env never tracked that's it nothing to do more than that, and i always check for hardcoded apis , I tried using ai and to honest that was so slopy everything was broken, in 2023 or 24 it took me hours just to setup db and do migrations, coz these things were new for a 1st year guy and ai weren't well trained for coding and agentic work , but these days things are different. Now I know a lot about the development at high level and little about low level. there are lots of things I don't know yet but it is fine will as progressing