I cried today
Was in a presentation today about managing personal finance. All going great. Then we get to the last 10 minutes, where someone else goes up and attempt to advertise their "app".
Ill preface this by saying I LOVE VIBECODING, but I know security flaws etc when I see them. I know how to set up SSL, UFW/firewall and have no objections to going in and rewriting code by hand if it isn't to the right standard.
So they go up and show us the app...
Glassmorphism (at least they made it pixelated to match the app),
Phrases like “revolutionizing the future of personal finance"
Pill-shaped badge above the title.
And the worst part is, they used replit. Their auth flow used replit and required login via google/github and then replit. Which app forces you to login twice? Oh. And it didn't work on mobile. At all.
I know what you are thinking... are they 12 year olds? No. These are full blown adults. As my profile clearly shows we use AI a lot, but this was too far. A 5 minute slop project being sold to investors is crazy.
Safe to say I got up there and then. (I meant got up out of there, not got up on stage. Im not that confrontational.) (No one went up to talk to them after their speech, because we could all tell.)
Comments Section
Am I the only one saying ‘what’s wrong withpill shaped badges ’? 😂
Lol. They look nice, but they are a tell tale sign of AI use.
These kind of people will poison the well for everyone else.
It's an AI post, this situation didn't happen 😭 Also, the author has been called out for writing AI slop but disguised it as autism???
So what? They sell the business idea not the app itself. It has been always like that. You build your first shitty version of your app, an investor likes the idea, invest in it and you get someone to build a real app. Vibecoding just made the first step easier and lowered barrier to entry. Judging the business idea by criticizing the app security is naive tbh.
unless the business idea has nothing novel, and it literally depends on the app just being a better version of what’s out there. Which it clearly isn’t.
Thank you. I was struggling to phrase it.
The business idea was a personal finance education app. Like the 500 that exist. And they wanted to charge a £39.99 monthly subscription for it...
And they had 0 test users.
Real question, what is classified as AI slop exactly? I've made some amazing things with very specific prompts, thorough testing, and revisions. I can get a small to medium project done, fully tested, and implemented in less than two weeks. Enhancements have been a breeze. I think 'slop' needs to be owned by the human, not the AI because you get out what you put in. I don't care if you are a master programmer/engineer, AI can do it much faster.
You see... you did testing. Their login process didn't work on mobile.
Any additional context? Like was this a presentation? Or other pitches being done?
An event with back-to-back pitches, talks etc.
"Safe to say I got up there and then." Then what?
You cried over this? Damn you must have a good life if this is the bar that gets you there. Dev of like 20 years and I appreciate a good understanding of the fundamentals but you just sound like a hater here. If the app wasn't good that sucks, hopefully they improve it. But they got up there and tried, even if you assume they only spent 5 mins on it, which probably isn't the case...that takes a lot of spirit to do. If they could have sold it to investors in it's current state that would have been good for them so why not try before spending months working on it. I've worked for SF based startups that had tens of millions thrown at them for basic CRUD functionality in mess of spaghetti code, it's quite common actually
What was the inverstors perspective?
The double Replit login is the detail that gets me. That's not a UX miss, that's just not testing your own app. At all.
The vibecoding problem isn't that the tools are bad, it's that the loop of "AI wrote it -> looks fine in the preview -> done" skips the part where you actually use the thing on a phone with a real account. Five minutes of that would've caught every issue you described.
You are 100% right and it shocked me how many people disagreed with me on this post, because I really can't look at it and go "this isn't careless", because it is.
So did the app work or not?
And then there is me.. working for months now on my software/webapp, fully offline on prem, testing the shit out of it, solving every small problem me or my close testers can find.
Not even inviting external beta testers until I have a clear list of what still needs to be done, so we can communicate that.
And then there are people who just give vibecoding the bad name it deserves. Building slop including security issues..
Heck i dont even use AI generated logo or UI buttons.. it clearly looks terrible and the quality is just bad.
You don't need to police it, the market will sort it out. I don't get why you're so upset at that?
This is why many of us roll our eyes when people talk about howvibecoding is going to make software engineers redundant.
Is it possible to use AI tools to build things fast? Yes, absolutely. Do the people who are talking about it the loudest know how to do it effectively? Just as absolutely, no. You don't know what you don't know.
In the words of a great sage, "Pride is a slow and insidious killer."
Democratized tools mean that anyone can do it. That means that people that won't be thorough have as much access to investors as people that will.
Lot of people acting like they were top tier full stack engineers a year ago. Revisionist history. The average 5 hourreplit project undergoes more security scrutiny testing than most startups put into their MVPs a year ago. Nearly every marketing agency in my region was (and many still are) shipping Wordpress slop, charging 5-6 figures, that gpt 3 could find backdoors into.
The gatekeeping ego and cope in this sub should be studied.
Someone doesn’t understand the idea of an MVP.
Editing to add the same person that doesn’t understand the concept of an MVP is also making posts trying to get developers to work on their project for free…lol.
I’m guessing none of this actually happened.
Concurrence is a good thing, and you should be thankful, bcs if your product is better, they actually are making you look good.
the pill-shaped badge is just a classic 🙏 😭
You KNOW WHAT?! That is the best business opportunity YOU get ever in your life!
Build in your freetime something that is easy and clear to - these morons - that buy all that crap.
Call it: App security checker or whatever professional name you can come up with that sounds as serious as that thing is.
Then let that thing that you build "know whatever someone builds up sloppy". Feed it the code so to speak and show then again an analytical profile for that thing a company might buy.
I mean they often have no idea right?!
So what would help them prevent them from harm (and bullshit)? That's a security issue here, and I assume companies pay for that. And everything your app needs to know is out there or partially a part of your experience...
And if it does not work out, who cares! The journey was surely interesting enough.
and feel better, keep your head up!
I’m not being shameless enough
My gosh it’s the same post about vibe coding. I’m not even subscribed to this. Brother we already know about vibe code, “it’s bad just code it yourself, market it without vibe coding, to many security issues in the code” blah blah blah yes we know it’s nothing new
You are self described as NOT a vibe coder “I go in and edit the code.” That isn’t vibecoding. You might be writing less code than an engineer, but you’re beginning to cross over.
I’ve been beating this drum for a while, at fist glance apps like the one you saw will wow execs (unless they’re technical.) they’ll fail spectacularly on implementation though.
What separates vibe slop from quality software? Effort. What form does that expertise take? Engineering skill.
the double login through replit is what actually exposes them. routing users through google/github then replit on top means they never built their own auth, they're just shipping the replit dev wrapper as the product. no real app sends users through the IDE's login layer, that's scaffolding leaking into prod
mobile not working at all is the bigger problem for a finance app tho. people check money on their phone, not desktop. pitching investors with a dead mobile view means they never tested the one device their users actually live on
the glassmorphism and "revolutionizing the future of" stuff is just template smell, harmless by itself, plenty of real products start from a generic landing page. the killer combo is replit auth wrapper plus zero mobile, that's not bad taste, it's proof nobody real ever used the thing before it went in front of money
title says you cried but the post reads more like secondhand embarrassment, what actually got you, just watching adults pitch slop with a straight face
the 'replit auth login twice' thing is hilarious and painful. vibe coding is great for prototyping but shipping 'slop' to investors is just embarrassing. we’re in this weird era where people think the vibe is the product. it's not. the vibe gets you the demo, the engineering keeps you alive. sorry you had to sit through that lol.
哎,以后程序,图片,文字都是人工智能生成
And here i am scared to show my project in beta after spending 4 months building it. Sigh
Comment removed by moderator