vibe coding

5 articles · newest first

Flat illustration of a person tapping a phone, with a dotted path carrying an envelope to a server building and a database, and a package returning

What is a backend? Explained for vibe coders, with a drawing

Frontend, server, database, API, secrets: the parts of your app you can't see, drawn as the journey of one tap, and why every security rule has to live on the far side of it.

Sam Ortega · 42m ago · 6 min

Flat illustration of a person dropping a key into a locked drawer under a desk, with a dotted line to a small server

Build

Environment variables and secrets, explained: the .env file

Why your app's keys live in labelled envelopes outside the code, which envelopes the browser gets a copy of (VITE_, NEXT_PUBLIC_), and where secret keys actually belong, from the tools' own docs.

Sam Ortega · 42m ago · 6 min

Flat illustration of a browser window with a hidden compartment showing a key, while a person moves a key into a safe

Build

Your API keys are in the browser: which ones matter and the fix

Whatever your app sends to the browser, anyone can read. Which keys are designed to be public, which must never be, how secrets end up there, and the server-function fix, from each vendor's own docs.

Sam Ortega · 42m ago · 7 min

Flat illustration of an open database cylinder with envelopes and keys floating out while a person fits a padlock

Build

The Moltbook breach: what a public Supabase key without RLS grants

An AI-built social network left its whole database readable and writable. The key wasn't stolen; one setting was missing. What happened, from Wiz's write-up, and the lesson for anyone building on Supabase.

Sam Ortega · 42m ago · 7 min

Flat illustration of a person with a clipboard checking padlock and shield icons around a laptop

Build

Before you share your vibe-coded app: the 6 security checks

The six mistakes behind 2026's vibe-coded app exposures, turned into checks you can do without reading code: RLS, secrets, server-side auth, admin, webhooks and rate limits.

Sam Ortega · 42m ago · 8 min