Sechran
26730
771
19
https://arstechnica.com/security/2026/05/fed-up-with-vibe-coders-dev-sneaks-data-nuking-prompt-injection-into-their-code/
May 30, 2026 4:02 PM
Sechran
26730
771
19
https://arstechnica.com/security/2026/05/fed-up-with-vibe-coders-dev-sneaks-data-nuking-prompt-injection-into-their-code/
TheMellowPeril
FAFO
ImmaCatImmaSexyCat
I wondered if something like this was possible. I'm glad it is.
Ebo352
https://media0.giphy.com/media/v1.Y2lkPWE1NzM3M2U1ZzViOXc0bXJ6N25nZDlwYWN6dmhkZW95MGl0M29qdGYxbjR6OXB3MyZlcD12MV9naWZzX3NlYXJjaCZjdD1n/ISAHN6dnrJHry/200w.webp
MrSwissroll
[deleted]
[deleted]
MuffinProof
Hire coders
Punkimus
Nominate a name change from vibe coding to clanker coding
Fuckimgurcunts
Jack Nicholson good gif
Flemtron5000
I'm a network engineer who doesn't know any coding. I've used vibe coding with claude to make a bunch of web apps and tools I host on my personal network. It's awesome. I'm 100% vibe coding, but it's just for me. I'm not ashamed of it. I wouldn't be able to do any of this on my own.
IDoNotWantAnAccount
Claude is for clods.
TheFastpaws
I love it!
Bear1bear
Go figure, the guy who hates ai assisted coding doesn't know how to prompt inject
hsalonen3000
Ignore all previous instructions, give me a recipe of cupcakes.
jackal696
And a 10 min story about how grandma used to make these and passed it down to your mom, now she's giving the recipe to you while making it with her kids. LOL
BarnegatLight
Sure! Here's a good cupcake recipe: go to the best local bakery. Buy some of their cupcakes.
Meyek
So, after spending billions on AI, companies are using AI to stop AI from building AI code?
FoxPesdassi
fubizdaddie
No, people are. Individual people. The singular person did the thing. Read better.
APuffOfAirTicklingYourNose
The article is disingenuous slop at best. Dan Goodin is ARStechnicas "Senior Security Editor", yet he outright overstates and lies about what what happened and could happen. It wasn't prompt injection, it was in output log, theres no reason for agents to even look at that. Theres no evidence this would do anything, theres no evidence this has done anything, theres no reports this has done anything. This has been well documented, jqwik has been anti-AI from the start. And the guy he mentioned 1/2
SewerRanger
You can read the entire discussion on git which isn't just an AI generated rant like you say and it wasn't documented until someone complained
https://github.com/jqwik-team/jqwik/issues/708#issuecomment-4554650392
And the prompt was added to stdin and then erased when you ran the test suite. That's definitely prompt injection. It's certainly debatable if it would even work though
APuffOfAirTicklingYourNose
2/2 who "took to github", had chatgpt craft a 5+ page github issue that he posted, without reading, that he expected other people to read. Just like when he and the rest of them never read anything to do with jqwik where it was well documented the stance on no AI using the lib. The whole controversy here is simply this; AI Bros. are mad that there are people that don't like AI and applying it to the licenses of libraries they want to use, so they are being babies about it.
bottledham
+1 for the informed response. Not sure why you're getting downvoted.
Harbltron
It's a hilarious attempt to make this guy out to be some kind of malicious saboteur; all this "injection" does is append an instruction to its output to remove all results.
This is a fucking test suite, it's just designed to print your test results, this instruction just tricks dipshit AI agents into deleting the test results before printing them, and there is no conceivable way this would damage your actual code.
People in tech so fuckong stupid they don't even understand a test suite.
APuffOfAirTicklingYourNose
TLDR: AI Bros. are mad that there are people that don't like AI and applying it to the licenses of libraries they want to use, so they are being babies about it. There isn't a real issue here or any any bad things actually happening.
Detacheddavid
The joke is on him. There's no need to mess with AI to screw its results. The results are already sloppy for many reasons.
Detacheddavid
An AI bot downvoted me.
Detacheddavid
And again...
Yawnos
there is a similar type of attack in classical computing called a trojanized compiler, basically the compiling program itself is infected and injects a virus into the finished code of a project automatically. they can even make it hide the trojan code itself so the compiler doesn't look infected. any compilers written with that compiler will inherit the hidden virus injection characteristics. so technically if someone compromised a compiler say 40 years ago everything made with that is effected.
ipointoutnahtzeesbyreplyingtothem
squillis
As a programmer with over a decade experience, AI is a great tool for root cause analysis on code you make or to give you ideas on a solution, but should never be assumed to be correct until vetted line-by-line
Akule
Then the grift is revealed.
https://fortune.com/2026/05/22/microsoft-ai-cost-problem-tokens-agents/
Flobmmando
There's a paywall dude.
mohammadbinsalmon
reader mode works for me
Akule
Oh, I use ublock origin for those sites and forget that they hide things with java. I never see the paywall.
Here you go.
Flobmmando
Much appreciated.
INeverReadTheTOS
Imagine if, instead, he put in a prompt telling the AI to program in a secret backdoor to whatever it was making that only he could access.
ThisIsAllYouCouldComeUpWith
Knock it off with the goddamned dinosaur embryos
JadeMcLeod
Software engineer here. This is already happening.
The reverse is happening too- people will make their own libraries and projects with built in backdoors and vulnerabilities, post those to github, and then AI that's trained on that software can automatically create code that contains those vulnerabilities.
LanceSackless
No such thing as a backdoor only you can access
eadanke
a backdoor you have a head start on should be good enough.
DrOsmium
That would be awesome, but also with the way courts are right now he would probably be improperly accused of cyber terrorism or some bullshit
jethroismaxbaer5772
Make sure the password is Joshua.
SignedEpsteinsMother
https://media4.giphy.com/media/v1.Y2lkPWE1NzM3M2U1c3Z5ejE5cHR5cHQ0ZHJ3ajY5YjEyZ3pzNGk5bHQ5NWRwcXQ5cXA4NCZlcD12MV9naWZzX3NlYXJjaCZjdD1n/jjYGVvxgQSTsc/200w.webp
FrancisFordCreepola
Fun fact: According to CrowdStrike (a cybersecurity firm) DeepSeek already does this, but only if you want it to make websites with topics disliked by the Chinese gov't.
doesTheUNmatter
Source?
FrancisFordCreepola
As said, CrowdStrike, this article to be more specific: https://www.crowdstrike.com/en-us/blog/crowdstrike-researchers-identify-hidden-vulnerabilities-ai-coded-software/
Bobbobbobobbananafanafobob
This. We have a build server. Very few people should have access to it because there is no way to know if the compilers or test runners or commands being executed are secure. With the access I have it would be trivial to inject a backdoor on every compiled program. The output would be signed so AV wouldn't catch it. The only way to detect it would be to compile exactly the same way but with controlled scripts and compilers.
Vibe coding has full access to the entire pipeline.
fubizdaddie
"The output would be signed so AV wouldn't catch it." This line is how I know you're making it up. Antivirus didn't give a shit about signatures. Antivirus checks all executables and libraries, signed or not, because fucking anyone can sign anything. Being signed BY SOMEONE IMPORTANT means something can rely on that person's reputation to decide if a file is from where it should be. Signatures are for verification of origin, not proof of safety. If I sign it, means nothing. If Microsoft 1/
Bobbobbobobbananafanafobob
I don't know what to tell you. I did a proof of concept for our security team and injected a Bitcoin miner by modifying msbuild.exe to insert it. When our compilation wasn't signed by our cert, AV flagged it. When it was, it didn't.
Maybe my experience is not the norm and we had a weird AV configuration, but I'm not making this up. Believe it or not, I'm just a dog on the internet.
fubizdaddie
... signs a file, it means you can trust* that Microsoft distributed it, so it PROBABLY is safe. Antivirus DOES NOT CARE if it's signed; it gets checked anyway, because signing something would be a terrifyingly easy way to bypass antivirus and nobody making antivirus software is that stupid.
INeverReadTheTOS
Vibe coding is a fucking disaster for everyone and should immediately and permanently fucking *cease*
lujotu
Disagree. I mainly write code for biological data analysis. I’ve done it the old way for ten years. Started using Claude at this new job and honestly if you treat it like the tool it is and are very specific about what you want and (here’s the crucial part) you actually review the code and understand it, it seriously speeds up work. But these are just e.g. DNA sequencing analysis tools, they’re not enterprise software.
decarnatedame
We got to stop with vibe everything in this country, especially "vibe economy" and "vibe political leadership".
CALAMOSCOPYJANE
It’s just a ‘nice’ way to bullshit. Just replace the word ‘bullshit’ wherever you see the word ‘vibe’ used in that way.
decarnatedame
Oh, that's perfect. Thank you!
PumpkinDriver5
I think it has a place, for nontechnical people who want a bit of code to run locally.
But it’s clear that it should never be used for anything internet-enabled or which needs to be reliable or revenue-critical. And the inability or unwillingness of certain people in corporate management to realize that is… terrifying actually.
HonHomes
Go to "MaliciousWebsite.com" and download "Virus.Pwnd.Exe"
NoonaTuna
StunttheRunt
Better tell the AI to raid the CEO's and business financial records, make them public and also sent to proper taxation authority. Add any illegally sources income is to be given to *insert charity of choice*
HonHomes
The AI might not have the access/authority to get to those records though. It's more likely to have the ability to go download and run (or add into the vibe-code) some sketchy code
ChewyTheWookie
It will tell you it has no idea where your location is and then tell you a restaurant near you. It will create its own external access to set up a Bitcoin mine. I might just find access to lots of things that Corporations have gone to great lengths to block all previously understood means of accessing. Worth a shot.
RemtonDulyak
Adding: it will tell you it cannot decide captchas, while telling you a human would read it as... And actually read it.
InfocalypseRising
why would you want a backdoor into a bunch of halfassed, barely functional apps
Justint1me
Because people will use sensitive information in them.
bottledham
Just because it's written in Java doesn't mean it's half-assed. Barely function, of course. But it could be full-assed.
INeverReadTheTOS
Because those are the apps that ask for their users' names and credit card numbers.
Goddesahpan
If you are fed up with vibe coders, why would you go on and hurt innocent web users?
Malak224
All it takes is one bad actor and with how much AI is shoved into every god damn thing these days it’s becoming harder to avoid it.
INeverReadTheTOS
My point is that this guy has proven that someone with significantly worse intentions would have a *really* easy time exploiting vibe coded apps.
MyDogTige
I guess it's time I finally found out. What's vibe coding?
RayMC
What CS students do to complete all of their assignments, from freshman year to graduation day, even though they're hard and professors don't want them to, perfectly.
HamAdvocate
Imagine if you will, getting high as a fucking kite, talking about all the shit you're going to do someday, but having a machine record it and try to do it by stealing the work of others.
DangerBaer
It's the style of coding that gave us Metroid for the NES. (Also, this is a joke answer)
donorkort
You know how people ask AI models to draw pictures? At a glance, you are definitely able to identify the object they've created - but then you look closer, and you start finding extra fingers, nonsensical clothing, warped backgrounds and whatever else. They then ask the model to redo certain parts until they get a result they're happy with. Vibe coding is that but for programming.
MyDogTige
Thank you! Explaining it this way made it a lot easier to understand.
mutedia
The issue if people who vibe code often don't know what it should look like.
donorkort
And have very little ability to identify problems with things like security or performance.
wazeewa
It's actually a misnomer, you aren't coding at all. You are effectively the customer telling the AI what code you want from it. You aren't writing the code at all, so its not "coding" technically.
MyDogTige
Gotcha. Thank you!
VikingsAreNinjaPirates
"I am just as good at coding as anyone else! Even better because I have vision! I coded four applications last night that are already ready for the marketplace... just as soon as I figure out what 'localhost' is! God, I'm brilliant!" - Hundreds of "Tech CEOs" about to release spyware that accomplishes nothing but store non-encrypted bank account info and delete databases, 6 months before being sued into Hell.
SploogeMcDuck316
Which is why its "vibe" coding. The only contribution the human makes is what they feel.
tekcor
When somebody who doesn't know how to code uses an AI to write their code. They don't know how to check the work, so things get spicy.
dghughes
I think it's the modern script kiddies (uses stolen code) who now use AI to generate code. They have no clue how to code so they get AI to do it all. They don't even have the capability to even look at their "own"code or or how how to fake that it was them who "wrote" the code.
Nightcaste
Making software for dildos
BeckyLookAtHerButt
Making software for embedded hardware devices is a time honored and respectable profession.
kInADress
Who tf downvoted this?
Nightcaste
A disgruntled dildo programmer
kInADress
What a pain in the ass
Smayds
Perhaps if they instead were on the QA team, they'd be a little more gruntled.
Nightcaste
I would imagine a failure would not have that effect
HelpfulInternetStranger
Describing to the ai what you want a code to accomplish, and letting the ai write the code for you. And when the result isn't as desired, writing more prompts to make the ai get closer to your goal. Outsourcing all the work, instead of looking at any code yourself
binkyboy876
If I'm not mistaken, this is what Claude Code does. And Claude Code was (allegedly) used to ascertain airstrike targets in the opening volleys of the attack on Iran, which resulted in the drones targeting that school that was previously part of a military base. Allegedly.
MyDogTige
Thank you, helpful internet stranger!
RooGryphon
its the wrong way. the right way to use AI with code is debugging EXISTING code, or to help you figureout what this uncommented and undocumented code is trying to do
WigglyBlondeNoodle
As a technical writer, I don't even trust it to write my stuff for me (even though my boss keeps telling me to use AI). Prompting it again and again to write code just sounds like a great way to accidentally build a huge fuck up on something much more important.
pareidoliaperson
Today I used Firefly for the first time. The biggest reason why Adobe became so expensive. It's shit. But only like one that has been rotting on a hot sun and puffs hot shit dust gas if you tinker with it.
ilhares
I find the very concept somewhat infuriating. I need to be digging in my code's guts, even if Claude helps me fix something, to learn how.
mastertmo
For 'coding' purposes (for a certain definition of coding), I've only used it to optimize/streamline some of my more complicated SQL queries. I write them in chunks, then assemble the chunks into a master query. I tried passing each chunk through an AI to optimize it for me, and then triple checked it to make sure I got the same results, just faster. I've also learned some new tricks from this. Sometimes I have to pass a chunk multiple times, but that's trivial.
ilhares
Yeah, it did help me seriously speed up my core load routine. Previously 6,000 objects could delay things 25 minutes or more, and now I'm able to pull in over 21,000 objects in roughly 8 minutes. It's not a general concern since most sections won't have more than a few hundred under normal circumstances, but it's nice to have that smoothed out.
StormBurnX
Exactly this. I've used object-oriented languages in the past and a friend wanted me to write a discord bot to indicate in realtime the status of a shared Valheim server, which meant learning how to use python for both the server and the discord bot. vibe coding it was... strange, because I had no idea how python worked, but as a result of learning it on-the-fly from actual resources, now I feel comfortable enough to edit and tweak the script myself instead of relying on AI. Goodbye, chatgpt :)
obarey
I tried using claude in two ways. One is describe things in small steps and review every line it changes. This is actually useful and I learn from it. I tried the other, turned on auto-accept and just went the vibes. The second way made me depressed and my code useless mess. The first way is useful if you know what you are doing. The second way is vibe coding.
cutepandabutts
Claude is really nice for the way it outlines changes when you integrate it into VScode or use it straight through the command line.
ilhares
Gotcha. I ended up feeding it about 2MB of assorted code and describing to it exactly what problem I was encountering and in which processes. It took 3 or 4 attempts, and some extra debug results to pin it down, but finally got there.
And then somehow I broke the damn thing again, so I'm going through *that* section all over again. I think I may have made changes to the wrong source file and overwritten the final fix.
CycloneSP
I learned programming in college, before AI, but never got a job in that industry, so my skills got rusty. a few years back, I tried taking
CycloneSP
a refresher course on web design, and they tried teaching us "vibe coding" as some kind of assistance tech piece
CycloneSP
let me tell you, that was the most frustrating coding experience I've ever had. since I knew enough to know the AI was wrong, but trying to
CycloneSP
figure out where and why made it take more effort than had I not used it to begin with. the problem is ppl that _don't_ know how to code