this post was submitted on 08 Aug 2025
403 points (85.2% liked)

Privacy

3546 readers
82 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 9 months ago
MODERATORS
fxomt@lemmy.dbzer0.com
otter@lemmy.ca
shaytan@lemmy.dbzer0.com
fxomt@piefed.social
403
Proton is vibe coding some of its apps. (infosec.pub)
submitted 1 week ago* (last edited 1 week ago) by irelephant@lemmy.dbzer0.com to c/privacy@lemmy.dbzer0.com
183 comments fedilink hide all child comments
 

TranscriptA post by [object Object] (@zzt@mas.to) saying: courtesy of @davidgerard@circumstances.run, Proton is now the only privacy vendor I know of that vibe codes its apps: In the single most damning thing I can say about Proton in 2025, the Proton GitHub repository has a “cursorrules” file. They’re vibe-coding their public systems. Much secure! I am once again begging anyone who will listen to get off of Proton as soon as reasonably possible, and to avoid their new (terrible) apps in any case. https://circumstances.run/@davidgerard/114961415946154957

It has a reply by the author saying: in an unsurprising update for those familiar with how Proton operates, they silently rewrote their monorepo’s history to purge .cursor and hide that they were vibe coding: https://github.com/ProtonMail/WebClients/tree/2a5e2ad4db0c84f39050bf2353c944a96d38e07f

given the utter lack of communication from Proton on this, I can only guess they’ve extracted .cursor into an external repository and continue to use it out of sight of the public

you are viewing a single comment's thread
view the rest of the comments
[–] otter@lemmy.ca 40 points 1 week ago* (last edited 1 week ago)

Sure, but even VS code has been pushing Copilot pretty hard and from the screenshots the setups look fairly similar. It's a recently released code editor with their own personal AI built in vs. VS Code which has the AI as an extension (or built in, I don't know what the default install is like these days).

If they're using it to auto complete lines of code or fill out boilerplate then I don't see the problem. If they're typing "make me a password manager" into the prompt window, hitting enter, and accepting it blindly, that's a problem. Also the code is (at least in this case) open source, so there should be better evidence of bad vibe coded code than the presence of a config file

I think there are better things to criticise Proton for, and unless there is more to the vibe coding than using the Cursor, citing this as a reason will get those other criticisms ignored in the noise.