Hacker News

Favorites Setup
Comment by emerongi | original | Lovable apps expose passport details and more than 200K private messages
[−]emerongi · 2026-11-14 Sat 23:38 UTC · link
If the consultancy delivers vulnerable software to the customer, the customer would most likely sue the consultancy for any damages they incurred. Especially if there is a maintenance contract, where the consultancy handles any security upgrades etc that are necessary.
[−]neathack · 2026-11-15 Sun 00:13 UTC · link
This is what Lovable's terms say:

  # AI Output
  
  The Services may use artificial intelligence models to
  generate code, content, or other outputs ("AI Output").
  AI Output may contain errors, inaccuracies, or other
  issues and should not be relied upon without
  independent review and testing. You are solely
  responsible for reviewing, validating, and using any
  AI Output, whether it is generated through:
  
  - our Platform's integrated AI;
  - the AI Gateway (via Third-Party AI Providers); or
  - any model or API that you connect to the Services.
https://lovable.dev/terms
[−]jacquesm · 2026-11-15 Sun 00:18 UTC · link
Disclaimers don't trump law. I'd love to see this tested in court.
[−]skeeter2020 · 2026-11-15 Sun 15:11 UTC · link
I've never used lovable; do they have any sort of human-approval gate step between (or around) generating an app and deployment/availability? INAL but I wonder if that would CYA for responsibility of releasing bad code created by their AI...