August 27th, 2025 × #VibeCoding#Security#AccessControl#Authentication
Vibe Coding’s Huge Problem
Wes and Scott break down why vibe-coded apps are about to spawn a wave of security disasters, from client-side auth checks to the Tea app's wide-open Firebase bucket. Plus practical tips for access control, and sick picks of hotel scents and a book about colonizing Mars.
Wes Bos Host
Scott Tolinski Host
#932
Wes and Scott talk about the dangers of vibe coding when it comes to authentication and access control. They share real-world examples of security fails, discuss how to avoid client-side-only checks, and offer practical tips for protecting sensitive user data in your apps.
Show Notes
- 00:00 Welcome to Syntax!
- 02:08 Brought to you by Sentry.io
- 02:33 Wes' vibe coding experience
- 04:38 The Tea app disaster
- 07:45 Don’t vibe code access control
- 09:38 Let in, don’t lock down
- 11:23 Server vs. client-side code
- 13:46 Visualize access control
- 15:30 Automate tests
- 17:00 Sick Picks + Shameless Plugs
Sick Picks
- Scott: A City on Mars
- Wes: Hotel Collection Essential Oils
Shameless Plugs
Hit us up on Socials!
Syntax: X Instagram Tiktok LinkedIn Threads
Wes: X Instagram Tiktok LinkedIn Threads
