cross-posted from: https://lemmy.dbzer0.com/post/50693956

Transcript

A post by [object Object] (@zzt@mas.to) saying: courtesy of @davidgerard@circumstances.run, Proton is now the only privacy vendor I know of that vibe codes its apps: In the single most damning thing I can say about Proton in 2025, the Proton GitHub repository has a “cursorrules” file. They’re vibe-coding their public systems. Much secure! I am once again begging anyone who will listen to get off of Proton as soon as reasonably possible, and to avoid their new (terrible) apps in any case. https://circumstances.run/@davidgerard/114961415946154957

It has a reply by the author saying: in an unsurprising update for those familiar with how Proton operates, they silently rewrote their monorepo’s history to purge .cursor and hide that they were vibe coding: https://github.com/ProtonMail/WebClients/tree/2a5e2ad4db0c84f39050bf2353c944a96d38e07f

given the utter lack of communication from Proton on this, I can only guess they’ve extracted .cursor into an external repository and continue to use it out of sight of the public

  • Daniel Quinn@lemmy.caEnglish
    3·
    4 months ago

    So a Cursor config file made it into the repo and was later removed and they just declare that this must be a case of trying to obfuscate their vibe coding policy? “They must have moved it to a private repo!” That seems like a logical jump made out of personal bias.

    A far more likely case, (and one I’ve seen in dozens of projects myself) is that someone was using Cursor locally and committed the file by mistake. Then when they realised this, they removed it.

    People (especially juniors) commit their .idea or .vscode files all the time. Normally, I catch this at review time, but sometimes it slips by. It’s still not great that anyone was using Cursor in the first place, but this alone is hardly evidence of policy or conspiracy.

  • truthfultemporarily@feddit.org
    2·
    4 months ago

    Calling something “vibe coded” feels similar to calling something “woke”. Its used for everything so it lost all meaning.

    If I start writing a function name and the coding assistant suggests exactly, character by character, the function signature I would have typed, is that vibecoding? If I ask an agent to check out my classes and create me a json schema from that, what about that? What if I ask it to write me some database connection stuff, boilerplate that is basically directly copy pasted from docs?

    The presence of a cursorrules file signifies… Nothing. Most projects now have a prompt file to store general context, like styling etc. Most programmers use coding assistants. The use of coding assistants does not, in of itself, mean bad quality. Obviously you have to hide it because people get irrationally angry about it.

    The blind AI hate does not help. LLMs can be useful. Is it stupid to have an LLM write an email so the other side can use an LLM to summarize it? Yes. Is LLM slop annoying? Yes. That does not mean that everything is bad. If you check out the Developer-sphere, people who have tried coding assistants for a couple years now, the consensus is “overhyped but definitely useful”.

    Example, read this comment section: https://news.ycombinator.com/item?id=44836879

    • e8d79@discuss.tchncs.deOPM
      11·
      4 months ago

      The second you allow slop generator use into your code base the quality takes a nosedive. People claim to review their slop but I have seen it often enough, all they are doing is hitting accept all without even reading half of the generated code. This isn’t “just a tool” this is technical debt as a service.

      Also Hackernews is ridiculous den of techbros, libertarians, AI maximalists and temporarily embarrassed founders who think they stand to gain the most from hyping up slop generators. Trusting them with anything related to AI is like asking the CEO of Microsoft if you should use Windows or Linux.