Wes and Scott talk about the dangers of vibe coding when it comes to authentication and access control. They share real-world examples of security fails, discuss how to avoid client-side-only checks, and offer practical tips for protecting sensitive user data in your apps.

Show Notes

• 00:00 Welcome to Syntax!
  • We build the world’s most painful CAPTCHAs (Kitboga scammers)
• 02:08 Brought to you by Sentry.io
• 02:33 Wes’ vibe coding experience
  • Wes’ app
• 04:38 The Tea app disaster
  • Tea app
• 07:45 Don’t vibe code access control
  • Better Auth with Better Auth
• 09:38 Let in, don’t lock down
• 11:23 Server vs. client-side code
• 13:46 Visualize access control
• 15:30 Automate tests
• 17:00 Sick Picks + Shameless Plugs

Sick Picks

• Scott: A City on Mars
• Wes: Hotel Collection Essential Oils

Shameless Plugs

• Syntax YouTube Channel

Hit us up on Socials!

Syntax: X Instagram Tiktok LinkedIn Threads

Wes: X Instagram Tiktok LinkedIn Threads

Scott: X Instagram Tiktok LinkedIn Threads

Randy: X Instagram YouTube Threads