Woman has an abusive ex and moves to a new address.
Keeps it private from him and is very careful who she shares it with.
Buys something online from a website she had no idea was built on Lovable (doesn't even know what that is, why would she?).
He finds her address, knock knock.
Unlikely? Yes, at the individual level. But the odds that just one customer out of all the folks using the 4,000 websites estimated by this researcher to leak private information is in a situation where their address becoming public puts them at risk? Probably pretty high...
It's easy to shrug these situations off, especially when you're not affected. But if you had all of the information needed to steal your identity — including your fucking *Passport,* you might understand the severity of the consequences a bit more viscerally. And FFS, who the hell is using Lovable to build a website that does something serious enough to warrant collecting Passport information?
Keep in mind these no-code sites are proliferating at the very same time that LLMs are becoming incredibly effective at finding vulnerabilities — even Postgres delayed their latest release to focus on a backlog of serious bugs uncovered by an LLM (Opus?). sshhole.com is another example of an egregious bug in ssh being uncovered after years in the wild by LLMs. It's really a perfect storm…
And then they could do something else that might result in property damage. Not at all comparable to the danger of an unlicensed pilot.
Keeps it private from him and is very careful who she shares it with.
Buys something online from a website she had no idea was built on Lovable (doesn't even know what that is, why would she?).
He finds her address, knock knock.
Unlikely? Yes, at the individual level. But the odds that just one customer out of all the folks using the 4,000 websites estimated by this researcher to leak private information is in a situation where their address becoming public puts them at risk? Probably pretty high...
It's easy to shrug these situations off, especially when you're not affected. But if you had all of the information needed to steal your identity — including your fucking *Passport,* you might understand the severity of the consequences a bit more viscerally. And FFS, who the hell is using Lovable to build a website that does something serious enough to warrant collecting Passport information?
Keep in mind these no-code sites are proliferating at the very same time that LLMs are becoming incredibly effective at finding vulnerabilities — even Postgres delayed their latest release to focus on a backlog of serious bugs uncovered by an LLM (Opus?). sshhole.com is another example of an egregious bug in ssh being uncovered after years in the wild by LLMs. It's really a perfect storm…