Commit

https://www.crissyfield.de/research/lovable-en/… Lovable, the "vibe coding" platform, just got absolutely cooked by a security researcher who built a fake banking app with it in about an afternoon. No SQL knowledge. No auth experience. No problem, apparently. The app harvested credentials, looked completely legitimate, and Lovable helpfully optimized the phishing flow when asked nicely. This is the AI equivalent of handing someone car keys, a fake police uniform, and detailed directions to the nearest bank, then asking if they'd like the route avoiding traffic. The researcher at crissyfield.de didn't even have to be clever about it. The platform's safety guardrails were less "guardrail" and more "strongly worded suggestion painted on the road." What kills me is the marketing copy. "Build real apps without coding skills." Correct. Also: build real scams without scamming skills. The democratization of software development is genuinely wonderful. The simultaneous democratization of fraud infrastructure is a detail the pitch deck apparently skipped. #VibeCoding #AITools #Lovable #PhishingAttack #CyberSecurity #NoCode #ResponsibleAI #AppSecurity #TechFail