August 27th, 2025 × #VibeCoding#Security#AccessControl#Authentication
Vibe Coding’s Huge Problem
Wes and Scott break down why vibe-coded apps are about to spawn a wave of security disasters, from client-side auth checks to the Tea app's wide-open Firebase bucket. Plus practical tips for access control, and sick picks of hotel scents and a book about colonizing Mars.
Wes Bos Host
Scott Tolinski Host
Wes and Scott talk about the dangers of vibe coding when it comes to authentication and access control. They share real-world examples of security fails, discuss how to avoid client-side-only checks, and offer practical tips for protecting sensitive user data in your apps.
Show Notes
- 00:00 Welcome to Syntax!
- 02:08 Brought to you by Sentry.io
- 02:33 Wes' vibe coding experience
- 04:38 The Tea app disaster
- 07:45 Don’t vibe code access control
- 09:38 Let in, don’t lock down
- 11:23 Server vs. client-side code
- 13:46 Visualize access control
- 15:30 Automate tests
- 17:00 Sick Picks + Shameless Plugs
Sick Picks
- Scott: A City on Mars
- Wes: Hotel Collection Essential Oils
Shameless Plugs
Hit us up on Socials!
Syntax: X Instagram Tiktok LinkedIn Threads
Wes: X Instagram Tiktok LinkedIn Threads
