upvote
I strongly disagree with the second part. Building public app should not require same level of skill as flying an airplane. Not even the same as getting a driver license. It had to be simple, secure and compliant.

The problem are product managers and engineers who build things like Lovable, that are not secure by design. Those products have no right to exist, but their alternatives could exist and let their users focus on what matters, instead of paying web development tax.

reply
Those are not even remotely equivalent costs.
reply
You’re right, only if the person building the application is using sound judgement, which goes against the premise.

You and I wouldn’t build applications naively that could lead to people dying. People who don’t understand what they’re building might.

People are vibe coding at your hospital. They’re vibe coding at your utility company. They’re vibe coding at your pharma lab. I’ve met these people. They’re smart. They have phds. I tell them about SSL.

reply
Nobody is dying from this leak.
reply
I'm sure some people are having their lives turned upside down by these data breaches.
reply
domino effect, these leaked credentials could easily end up on the darknet and used as data for black hat tracking tools which criminals use
reply
> these leaked credentials could easily end up on the darknet and used as data for black hat tracking tools which criminals use

And then they could do something else that might result in property damage. Not at all comparable to the danger of an unlicensed pilot.

reply
No, but identity theft really sucks.
reply
I’ve been mentioning it for years, but data, privacy, and security do not matter to most people, despite them saying so. Personally I operate assuming that my IDs, passport and etc. have already been leaked at some point. So, if someone says my PII has leaked once again, I’d just shrug and move on.

When Equifax thing happened, there was basically no repercussions. And that’s the only data breach I recall being in the news cycle for more than a week. Everything else has just been a blip since then. Also as there were no real repercussions other than some fines, companies took it as a signal that nobody cares (rightfully).

reply
It's incredible how little understanding the average person has about plumbing, heating, and electricity.
reply
And I do not try to “vibe” plumb or do the electricity or heating of my house.
reply
They're also all licensed professions.
reply
only in some jurisdictions. in many places the job titles are not even protected.
reply
Allowing anyone to design, install, and maintain the plumbing, heating, and electricity of your house without a basic understanding of these things is like...
reply
> Allowing anyone to build and host a public app without a basic understanding of these things is like letting people fly a passenger plane without a license

Is it now? How many hundreds of people have died as a result? How much infrastructure was destroyed?

I get the point you're trying to make, but computer security as a field has already a big problem with maximalist mindset, and it doesn't help in keeping systems of consequence actually secure and people safe from danger.

reply
careful what you wish for. do you want outlaw teenagers of playing with computers until they get government issued web license?
reply
I could imagine licensing for handling certain forms of data. Or at the very least, liability.
reply
If they are running a company handling sensitive customer data…then yes.
reply
If that user is European the answer is almost definitely a 100% serious yes.
reply
After dryers and AC, the EU is coming for your websites!!!
reply