{"id":33,"date":"2025-11-17T09:00:00","date_gmt":"2025-11-17T07:00:00","guid":{"rendered":"https:\/\/blogs.ua.es\/erroresdelaia\/?p=33"},"modified":"2025-11-04T09:34:42","modified_gmt":"2025-11-04T07:34:42","slug":"el-lado-oscuro-del-vibe-coding","status":"publish","type":"post","link":"https:\/\/blogs.ua.es\/erroresdelaia\/2025\/11\/17\/el-lado-oscuro-del-vibe-coding\/","title":{"rendered":"El lado oscuro del vibe coding"},"content":{"rendered":"\n<p>En <a href=\"https:\/\/www.csoonline.com\/article\/4053635\/when-ai-nukes-your-database-the-dark-side-of-vibe-coding.html\">When AI nukes your database: The dark side of vibe coding<\/a>:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>The mishap has become a cautionary tale about \u201cvibe coding,\u201d the growing habit of offloading work to tools like GitHub Copilot or Replit GhostWriter that turn plain English prompts into runnable code. The appeal is obvious: faster prototyping, fewer barriers for non-coders, and a straight shot from idea to demo \u2014 but this speed cuts both ways, letting AI slip vulnerabilities into production or, as Replit\u2019s case proved, erase them altogether.<\/p>\n\n\n\n<p>There are a lot of inherent problems with vibe coding. \u201cFrequently occurring issues are missing or weak access controls, hardcoded secrets or passwords, unsanitized input, and insufficient rate limiting,\u201d said Forrester Analyst Janet Worthington. \u201cIn fact, Veracode recently found that 45% of AI-generated code contained an OWASP Top 10 vulnerability.\u201d<\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>En When AI nukes your database: The dark side of vibe coding: The mishap has become a cautionary tale about \u201cvibe coding,\u201d the growing habit of offloading work to tools like GitHub Copilot or Replit GhostWriter that turn plain English prompts into runnable code. The appeal is obvious: faster prototyping, fewer barriers for non-coders, and [&hellip;]<\/p>\n","protected":false},"author":40,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-33","post","type-post","status-publish","format-standard","hentry","category-sin-categoria"],"_links":{"self":[{"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/posts\/33","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/comments?post=33"}],"version-history":[{"count":1,"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/posts\/33\/revisions"}],"predecessor-version":[{"id":34,"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/posts\/33\/revisions\/34"}],"wp:attachment":[{"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/media?parent=33"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/categories?post=33"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ua.es\/erroresdelaia\/wp-json\/wp\/v2\/tags?post=33"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}