r/Steam • u/Haunter777x • 11h ago

Discussion They got us guys.

Post image

How out of touch can you be as a company, this is embarrassing

22.8k Upvotes

94% Upvoted

3.0k comments sorted by

View all comments

9

u/Gabes99 11h ago

Only a matter of time before some big enterprise pile of vibe coded nonsense is subject to an entirely preventable security breach.

1

u/Cabana_bananza 8h ago

Yeah, Georgia Tech maintains a website where they track and study how often LLMs will inject or cause security issues. They really struggle with backend architectures like Python. It doesn't breed confidence in the security of the platform with personal information.

1

u/Gabes99 8h ago edited 7h ago

In fairness python just should not be used for back ends. Specific data stuff within the backend sphere, yeh fine, but for the actual backend architecture handling REST, main business logic and/or message queues should be handled by an integration layer using .NET or Spring. Python can’t even do multi threading.

But yeh on that point, I’ve seen some pretty dubious stuff in backends security wise and I’m pretty sure vibe coding played a part in it. This is .NET as well where most of the security stuff exists already in Microsoft libraries, including an extremely easy to use auth middleware, already set up for you, all you need to do is register it with the DI, configure it, and add the attributes to the controllers.