Lovable, Grok Build, Fireworks: why AI-built apps expose other people's data
From AI Agents & Vibe Coding · 31:05
Show by Evgenii Arsentev
German researchers found 24,664 websites that hand over records from their database to any visitor, without a login. All of them were built with Lovable, an app builder where you create an application by describing it in a chat. Among the exposed data were passport numbers and hundreds of thousands of private messages and customer emails. In the same days, another group counted 35,578 apps from a similar builder, Grok Build, open to anyone at all, including hospital staff lists and the company's own internal documents. And Fireworks AI, the service behind assistants in Notion and other products, was breached twice in one month. The episode explains how each of the three stories works and what really stands behind the headline numbers. The episode is useful for anyone building a product with an AI agent. You will learn why an app can work on screen and still be open to strangers, and why a long secret link does not protect it. At the end come a few checks you can run before publishing your own project: a window without a login, a second account, and keys with a spending limit. Full transcript: https://arsentev.ai/podcast/ai-built-apps-leak-data-lovable-grok-build-fireworks Host: Evgenii Arsentev, creator of Arsminal, founder of ArsentevAI, Dad4Kids and ReelsZavod. Arsminal: https://arsminal.com ArsentevAI: https://arsentev.ai Dad4Kids: https://dad4kids.com ReelsZavod: https://reels-zavod.com
More episodes of AI Agents & Vibe Coding
More episodes
- LangChain at $3 billion: how the company runs on its own agents
- OpenAI and Anthropic's money: who really makes money from AI
- OpenAI Bought Odessia: A Travel Agency Run by Eight People and AI Agents
- AI Agent Tests All Green? Why That Proves Nothing When You Compare Setups
- Claude Code: How to Cut Your Token Spend
- AI from Zero: How to Become a Vibe Coder and Stop Fearing the Terminal
- When to Clear an Agent's Context: A Measured U-Curve
- AI Content Engine: What It Costs When AI Agents Replace a Video Studio
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.