Hacker News

Favorites Setup
Comment by birdsongs | original | Lovable apps expose passport details and more than 200K private messages
[−]birdsongs · 2026-11-14 Sat 19:28 UTC · link
Bad take. That's impossible in our society. I wouldn't get updates from my child's kindergarten. I wouldn't be able to use public transit. I can't access my bank. I can't communicate with my family, friends, spouse, work network.

We don't have an option. Which is why a lack of care for users is abhorrent.

[−]pluralmonad · 2026-11-14 Sat 21:08 UTC · link
Keeping _more_ of your data private is not impossible. It won't necessarily be the most comfortable thing, as tradeoffs will be made, but you can claw back quite a bit of privacy if that is important to you.
[−]birdsongs · 2026-11-14 Sat 22:25 UTC · link
Of course, but that's not what the person I was responding to said. They blamed people for trusting services (many of which) they don't have an option to opt out of.

And this whole thread is just proving my point by blaming people and customers for the mistakes of technology companies.

[−]gandhiandy69 · 2026-11-15 Sun 00:26 UTC · link
Lovable is not the same as using your bank account or your health insurance. You create a website and put it on the internet and maybe even host sensitive data and information. This should only be done if you know what you are doing and if that’s not the case and you haven’t read the terms of service it’s mostly your fault that you trust any company on the web especially those coked out VC backed startups.

If you invest more money you’ll get a good website and your data will be taken good care of by human professionals. It’s simple as that.

[−]schrodinger · 2026-11-15 Sun 01:49 UTC · link
If there are passports in these dumps, Lovable is obviously being used for sites that _are_ as serious as your bank account or health insurance. That's exactly the problem birdsong's bringing up in this thread.

If it were only used for prototypes and blogs, who cares. But it's being used by _real businesses_ that don't give a shit about security.

[−]gandhiandy69 · 2026-11-15 Sun 08:25 UTC · link
I specifically chose banks and health insurances specifically because you can not get around using their websites and online services in your daily life.

For all other services: is it really necessary to give them your passport info on the internet ?