Transcript

A post by [object Object] (@[email protected]) saying: courtesy of @[email protected], Proton is now the only privacy vendor I know of that vibe codes its apps: In the single most damning thing I can say about Proton in 2025, the Proton GitHub repository has a “cursorrules” file. They’re vibe-coding their public systems. Much secure! I am once again begging anyone who will listen to get off of Proton as soon as reasonably possible, and to avoid their new (terrible) apps in any case. https://circumstances.run/@davidgerard/114961415946154957

It has a reply by the author saying: in an unsurprising update for those familiar with how Proton operates, they silently rewrote their monorepo’s history to purge .cursor and hide that they were vibe coding: https://github.com/ProtonMail/WebClients/tree/2a5e2ad4db0c84f39050bf2353c944a96d38e07f

given the utter lack of communication from Proton on this, I can only guess they’ve extracted .cursor into an external repository and continue to use it out of sight of the public

  • BombOmOm@lemmy.worldEnglish
    33·
    16 hours ago

    Unfortunately, so is Visual Studio and VS Code.

    The presence of an AI assistant isn’t evidence of vibe coding. Even using that AI assistant to auto-complete lines or small sections of boilerplate isn’t vibe coding. To do that you need to ask the AI for whole swaths of code and then just accept what it gives you.

    Proton’s repo here is open source. What portion of it presents issues? Any?

    • ShoeThrower@lemmy.zip
      51·
      14 hours ago

      Why would you use Cursor instead of VS (the standard for decades) if you’re not going to use the AI features Cursor was specifically created for?

    • irelephant [he/him]@lemmy.dbzer0.comOP
      513·
      16 hours ago

      Sure, but cursor is different since it’s marketed as an Ai editor. VScode is just a general one.

      Proton’s repo here is open source. What portion of it presents issues? Any?

      Ai code is plausible bullshit, it may work, it may have bugs or vulnerabilities. It’s harder to spot these since its plausible bullshit.

      • BombOmOm@lemmy.worldEnglish
        15·
        15 hours ago

        but cursor is different since it’s marketed as an Ai editor. VScode is just a general one.

        See, that is just the thing: VS Code is marketed as an AI editor. The homepage is literally an autoplaying video of an AI writing code with this title, big and bold, right at the top of the screen:

      • akilou@sh.itjust.works
        101·
        15 hours ago

        Dude, you’re flaming a company because one of the tools they use is marketed as using AI? You gotta be kidding me. If your bar for privacy requires you to dive down this deep into a company’s asshole, you might as well just become Amish

      • sugar_in_your_tea@sh.itjust.works
        10·
        16 hours ago

        This really depends on what their code review process looks like. When I review code, I honestly don’t care how it was generated, I look at the requirements and the code, and determine whether the code meets the requirements. How the code was generated doesn’t impact that at all.