Privacy

3546 readers

81 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

Be civil and no prejudice
Don't promote big-tech software
No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
No reposting of news that was already posted
No crypto, blockchain, NFTs
No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 9 months ago

MODERATORS

fxomt@lemmy.dbzer0.com

otter@lemmy.ca

shaytan@lemmy.dbzer0.com

fxomt@piefed.social

403

Proton is vibe coding some of its apps. (infosec.pub)

submitted 1 week ago* (last edited 1 week ago) by irelephant@lemmy.dbzer0.com to c/privacy@lemmy.dbzer0.com

183 comments fedilink hide all child comments

Transcript

A post by [object Object] (@zzt@mas.to) saying: courtesy of @davidgerard@circumstances.run, Proton is now the only privacy vendor I know of that vibe codes its apps: In the single most damning thing I can say about Proton in 2025, the Proton GitHub repository has a “cursorrules” file. They’re vibe-coding their public systems. Much secure! I am once again begging anyone who will listen to get off of Proton as soon as reasonably possible, and to avoid their new (terrible) apps in any case. https://circumstances.run/@davidgerard/114961415946154957

It has a reply by the author saying: in an unsurprising update for those familiar with how Proton operates, they silently rewrote their monorepo’s history to purge .cursor and hide that they were vibe coding: https://github.com/ProtonMail/WebClients/tree/2a5e2ad4db0c84f39050bf2353c944a96d38e07f

given the utter lack of communication from Proton on this, I can only guess they’ve extracted .cursor into an external repository and continue to use it out of sight of the public

(page 3) 50 comments

sorted by: hot top controversial new old

[–] independantiste@sh.itjust.works 1 points 1 week ago (8 children)

I can't wait until you guys get real jobs and then realize that every company that is serious about software development heavily pushes for AI tools such as CLINE or Cursor. I use it at work but I wouldn't say I am vibe coding (mainly because it sucks ass). the reason they deleted the file from the repo is unlikely because they don't want people to know they use AI, it's more likely because AI rules files can contain info that you don't want to be made public

load more comments (8 replies)

[–] lIlIlIlIlIlIl@lemmy.world 1 points 1 week ago (1 children)

They’re cooked

load more comments (1 replies)

load more comments