I\u2019ve always preferred treating RLS as one layer of defense in depth, or an underlying safety net for when your backend code forgets to filter properly. Like wearing underwear just in case you get holes in your pants. I don\u2019t think that\u2019s Supabase\u2019s philosophy though and that\u2019s always bothered me."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_bal00ns","story_50499017"],"author":"bal00ns","comment_text":"> The whole premise of RLS is that you only have to think about data permissions in one place.
I\u2019ve always preferred treating RLS as one layer of defense in depth, or an underlying safety net for when your backend code forgets to filter properly. Like wearing underwear just in case you get holes in your pants. I don\u2019t think that\u2019s Supabase\u2019s philosophy though and that\u2019s always bothered me.","created_at":"2026-11-15T18:55:45Z","created_at_i":1794768945,"objectID":"50509571","parent_id":50507329,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T19:06:12Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"stef25"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"He's pointing out potential legal issues. Not everything is an AI problem."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_stef25","story_50499017"],"author":"stef25","comment_text":"He's pointing out potential legal issues. Not everything is an AI problem.","created_at":"2026-11-15T18:48:24Z","created_at_i":1794768504,"objectID":"50509520","parent_id":50501008,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:54:11Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"legostormtroopr"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"No, its 2026 - this isn't hacking any more. As long as you say it was AI that scrapped the publicly facing data, its ok and its just an alignment issue."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_legostormtroopr","story_50499017"],"author":"legostormtroopr","comment_text":"No, its 2026 - this isn't hacking any more. As long as you say it was AI that scrapped the publicly facing data, its ok and its just an alignment issue.","created_at":"2026-11-15T18:35:06Z","created_at_i":1794767706,"objectID":"50509401","parent_id":50499913,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:54:41Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"sandeepkd"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"Yes unfortunately security suffers a similar fate everywhere. For MVPs its a cost which is not tied to any revenue so it gets pushed on. Over the period of time you have built ecosystem of applications and services in a incremental way to provide features that customer asked for. Ironically no customer asked for the security explicitly, it was that non-functional requirement that exists in bare bones in some form. Its most likely not the part of architecture for sure in almost all the places, if an architecture exists.
The biggest revenue you will get is from enterprise customers and thats your biggest risk too if security goes south. You already have advantage of being close to customer stories and usage behavior. Some one within the company needs to build the platform again from grounds up with all these security requirements baked into the architecture, sort of parallel project one would say.
> We are committed to keeping scanners free.
This sounds like a good sentiment in theory, however this is a double edged sword. Scanning costs money to you as company and that cost is going to make it to the customer one way or another"},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_sandeepkd","story_50499017"],"author":"sandeepkd","comment_text":"Yes unfortunately security suffers a similar fate everywhere. For MVPs its a cost which is not tied to any revenue so it gets pushed on. Over the period of time you have built ecosystem of applications and services in a incremental way to provide features that customer asked for. Ironically no customer asked for the security explicitly, it was that non-functional requirement that exists in bare bones in some form. Its most likely not the part of architecture for sure in almost all the places, if an architecture exists.
The biggest revenue you will get is from enterprise customers and thats your biggest risk too if security goes south. You already have advantage of being close to customer stories and usage behavior. Some one within the company needs to build the platform again from grounds up with all these security requirements baked into the architecture, sort of parallel project one would say.
> We are committed to keeping scanners free.
This sounds like a good sentiment in theory, however this is a double edged sword. Scanning costs money to you as company and that cost is going to make it to the customer one way or another","created_at":"2026-11-15T18:30:32Z","created_at_i":1794767432,"objectID":"50509369","parent_id":50506288,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:34:56Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"neya"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"I read all your other comments and the way you defend a billion dollar corp made me question if you actually have any stake in it. It's not just one or two comments, you consistently went after OP for just exposing what a POS lovable is. I've been your follower for a very very long time to know that you would actually disclose something like that if that were true, but I just can't help but wonder with the aggressive defence for lovable here which I don't think they even deserve 1% of, to be honest. People are building vulnerable apps with them and the right thing to do is call them out on it.
Even after this disclosure I haven't seen any communication from lovable to me as a customer which is just outright disgusting."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_neya","story_50499017"],"author":"neya","comment_text":"I read all your other comments and the way you defend a billion dollar corp made me question if you actually have any stake in it. It's not just one or two comments, you consistently went after OP for just exposing what a POS lovable is. I've been your follower for a very very long time to know that you would actually disclose something like that if that were true, but I just can't help but wonder with the aggressive defence for lovable here which I don't think they even deserve 1% of, to be honest. People are building vulnerable apps with them and the right thing to do is call them out on it.
Even after this disclosure I haven't seen any communication from lovable to me as a customer which is just outright disgusting.","created_at":"2026-11-15T18:24:19Z","created_at_i":1794767059,"objectID":"50509316","parent_id":50499913,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T19:12:11Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"ivan_gammel"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"The fix is security by design, not the "auto-fixes" you ask customers to apply."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_ivan_gammel","story_50499017"],"author":"ivan_gammel","comment_text":"The fix is security by design, not the "auto-fixes" you ask customers to apply.","created_at":"2026-11-15T18:14:15Z","created_at_i":1794766455,"objectID":"50509230","parent_id":50502184,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T19:16:14Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"ivan_gammel"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"It is wrong to blame non-professionals for the failures of professionals. No, technical knowledge must not be required. No, people are not lazy, they just do not know where to start and may have incorrect assumptions about that. As a consequence, they may write a wrong initial prompt and end up with the same solution that Lovable offers or even worse, despite using the best in class model. This situation is not specific to Lovable or AI in general, it was always like that with end users and always the solution was to help them, not to demand from them to adapt."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_ivan_gammel","story_50499017"],"author":"ivan_gammel","comment_text":"It is wrong to blame non-professionals for the failures of professionals. No, technical knowledge must not be required. No, people are not lazy, they just do not know where to start and may have incorrect assumptions about that. As a consequence, they may write a wrong initial prompt and end up with the same solution that Lovable offers or even worse, despite using the best in class model. This situation is not specific to Lovable or AI in general, it was always like that with end users and always the solution was to help them, not to demand from them to adapt.","created_at":"2026-11-15T18:10:07Z","created_at_i":1794766207,"objectID":"50509183","parent_id":50507969,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:13:57Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"SOLAR_FIELDS"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"You have called out the issue precisely! The problem is that Supabase, and Lovable, market this product to people who are basically guaranteed to not know how to use RLS correctly. And that the defaults set are insecure - precisely because they know that if they set the security settings to be secure by default, that their end users would churn because... they don't know how to configure RLS. Then they turn around and say "Well, it's YOUR fault if you didn't know how to configure it properly, even though we marketed this to you as being approachable as a layman"
If I had a multi tool that I sold to the masses that required solving a simple math proof to operate or else there was a chance the product would explode in my hand, would it be my fault or the customers fault if it started exploding in the customer's hands, because I marketed it to everyone instead of just mathemeticians, and included no warning label? I can't require that people solve the math proof first and show they can solve math proofs in order to use the product because then they'll just return the product, because the vast majority of people I'm marketing to... can't solve math proofs.
I do, however, have an easy solution here! I can bury "user operates the multi tool at their own risk" in the T&C and now all sorts of hand explosions can happen and it's not my fault!"},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_SOLAR_FIELDS","story_50499017"],"author":"SOLAR_FIELDS","comment_text":"You have called out the issue precisely! The problem is that Supabase, and Lovable, market this product to people who are basically guaranteed to not know how to use RLS correctly. And that the defaults set are insecure - precisely because they know that if they set the security settings to be secure by default, that their end users would churn because... they don't know how to configure RLS. Then they turn around and say "Well, it's YOUR fault if you didn't know how to configure it properly, even though we marketed this to you as being approachable as a layman"
If I had a multi tool that I sold to the masses that required solving a simple math proof to operate or else there was a chance the product would explode in my hand, would it be my fault or the customers fault if it started exploding in the customer's hands, because I marketed it to everyone instead of just mathemeticians, and included no warning label? I can't require that people solve the math proof first and show they can solve math proofs in order to use the product because then they'll just return the product, because the vast majority of people I'm marketing to... can't solve math proofs.
I do, however, have an easy solution here! I can bury "user operates the multi tool at their own risk" in the T&C and now all sorts of hand explosions can happen and it's not my fault!","created_at":"2026-11-15T17:18:14Z","created_at_i":1794763094,"objectID":"50508679","parent_id":50503935,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:01:57Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"boonzeet"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"15.9% of the analysed sites, only the Supabase sites were analysed"},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_boonzeet","story_50499017"],"author":"boonzeet","comment_text":"15.9% of the analysed sites, only the Supabase sites were analysed","created_at":"2026-11-15T16:26:23Z","created_at_i":1794759983,"objectID":"50508159","parent_id":50499592,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:10:56Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"arunakt"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"this should be treated as a security incident, espeically user base of lovable should be provided comms."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_arunakt","story_50499017"],"author":"arunakt","comment_text":"this should be treated as a security incident, espeically user base of lovable should be provided comms.","created_at":"2026-11-15T16:21:17Z","created_at_i":1794759677,"objectID":"50508122","parent_id":50499017,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T16:23:43Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"jamesyoungquist"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"But not needing to know what you're doing as far as programming goes != not needing to know what you're doing as far as compliance/legal responsibility goes. Someone using a tool like this still needs to run their operation in a sane manner. Like, how much responsibility does Loveable shoulder here? We don't blame a car manufacturer for most car crashes. They, of course, try to design their cars to be as safe as possible, but the fact that they endeavor to make a safe car doesn't make it explicitly their fault if I'm driving blindfolded and careen off a cliff.
This is something that makes me roll my eyes... seeing people online talking about how everyone can just make their own version of w/e software now. As though running a software business is simply a matter making the computer screen light up in a particular way."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_jamesyoungquist","story_50499017"],"author":"jamesyoungquist","comment_text":"But not needing to know what you're doing as far as programming goes != not needing to know what you're doing as far as compliance/legal responsibility goes. Someone using a tool like this still needs to run their operation in a sane manner. Like, how much responsibility does Loveable shoulder here? We don't blame a car manufacturer for most car crashes. They, of course, try to design their cars to be as safe as possible, but the fact that they endeavor to make a safe car doesn't make it explicitly their fault if I'm driving blindfolded and careen off a cliff.
This is something that makes me roll my eyes... seeing people online talking about how everyone can just make their own version of w/e software now. As though running a software business is simply a matter making the computer screen light up in a particular way.","created_at":"2026-11-15T16:14:27Z","created_at_i":1794759267,"objectID":"50508058","parent_id":50506100,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T16:18:27Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"trollbridge"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"And a lawyer would make that decision and immediately decline to give advice once they find a conflict of interest between joint clients."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_trollbridge","story_50499017"],"author":"trollbridge","comment_text":"And a lawyer would make that decision and immediately decline to give advice once they find a conflict of interest between joint clients.","created_at":"2026-11-15T16:07:55Z","created_at_i":1794758875,"objectID":"50508002","parent_id":50500748,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T17:26:41Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"preg_match"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"Those people can very easily make a website all on their own using the latest models. It will be cheaper and higher quality.
Yes you will need SOME technical knowledge. But people are just lazy. Everyone can learn this stuff. Just ask any anthropic model how to deploy a website, it\u2019ll tell you."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_preg_match","story_50499017"],"author":"preg_match","children":[50509183],"comment_text":"Those people can very easily make a website all on their own using the latest models. It will be cheaper and higher quality.
Yes you will need SOME technical knowledge. But people are just lazy. Everyone can learn this stuff. Just ask any anthropic model how to deploy a website, it\u2019ll tell you.","created_at":"2026-11-15T16:04:28Z","created_at_i":1794758668,"objectID":"50507969","parent_id":50501683,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:10:56Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"yakkomajuri"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"This is exactly it."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_yakkomajuri","story_50499017"],"author":"yakkomajuri","comment_text":"This is exactly it.","created_at":"2026-11-15T15:25:43Z","created_at_i":1794756343,"objectID":"50507612","parent_id":50504617,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:11:26Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"skeeter2020"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"the purpose of Lovable is to increase signups, usage and other metrics that drive valuations. If security was a critical component the free usage tier is the ONE place you COULD force-apply these barriers without your customer having a valid complaint!"},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_skeeter2020","story_50499017"],"author":"skeeter2020","comment_text":"the purpose of Lovable is to increase signups, usage and other metrics that drive valuations. If security was a critical component the free usage tier is the ONE place you COULD force-apply these barriers without your customer having a valid complaint!","created_at":"2026-11-15T15:24:22Z","created_at_i":1794756262,"objectID":"50507596","parent_id":50506537,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T18:12:44Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"yakkomajuri"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"Agreed. Nothing inherently bad about RLS itself, but the way it was pushed forward in the Supabase model was always bound to be dangerous. Because like you say, it requires proper DB design, whereas the selling points of the Supabase model are simplicity and speed, so there's a bit of a mismatch here."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_yakkomajuri","story_50499017"],"author":"yakkomajuri","comment_text":"Agreed. Nothing inherently bad about RLS itself, but the way it was pushed forward in the Supabase model was always bound to be dangerous. Because like you say, it requires proper DB design, whereas the selling points of the Supabase model are simplicity and speed, so there's a bit of a mismatch here.","created_at":"2026-11-15T15:23:28Z","created_at_i":1794756208,"objectID":"50507580","parent_id":50507329,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T16:51:41Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"skeeter2020"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"So microsoft used to let you know when updates - even scary security ones - were available but never make you take action. They've gotten way more aggressive and now you have to have specific versions or a set of DevOps skills to prevent them from regularly applying and restarting your system. Their clients are mostly like yours: non technical users of very powerful systems; why don't you force upgrade after a certain period, even if it breaks apps in order to secure them? It has to be because that's bad for your company's goals, i.e. security is important but below growth and usage."},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_skeeter2020","story_50499017"],"author":"skeeter2020","comment_text":"So microsoft used to let you know when updates - even scary security ones - were available but never make you take action. They've gotten way more aggressive and now you have to have specific versions or a set of DevOps skills to prevent them from regularly applying and restarting your system. Their clients are mostly like yours: non technical users of very powerful systems; why don't you force upgrade after a certain period, even if it breaks apps in order to secure them? It has to be because that's bad for your company's goals, i.e. security is important but below growth and usage.","created_at":"2026-11-15T15:20:12Z","created_at_i":1794756012,"objectID":"50507539","parent_id":50506442,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T17:28:26Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"FromTheFirstIn"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"Idk why I\u2019m acting like a person read my comment. May as well ask you to write a sonnet for all this addressed what I said"},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_FromTheFirstIn","story_50499017"],"author":"FromTheFirstIn","comment_text":"Idk why I\u2019m acting like a person read my comment. May as well ask you to write a sonnet for all this addressed what I said","created_at":"2026-11-15T15:20:05Z","created_at_i":1794756005,"objectID":"50507537","parent_id":50506309,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T20:46:57Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"skeeter2020"},"comment_text":{"matchLevel":"none","matchedWords":[],"value":"do we need yet-another-framework (cue xkcd standards link) or do they actually need to support one or all of the many that already cover financial, medical and personal data?"},"story_title":{"matchLevel":"none","matchedWords":[],"value":"Lovable apps expose passport details and more than 200K private messages"},"story_url":{"matchLevel":"none","matchedWords":[],"value":"https://www.crissyfield.de/research/lovable-en/"}},"_tags":["comment","author_skeeter2020","story_50499017"],"author":"skeeter2020","comment_text":"do we need yet-another-framework (cue xkcd standards link) or do they actually need to support one or all of the many that already cover financial, medical and personal data?","created_at":"2026-11-15T15:14:19Z","created_at_i":1794755659,"objectID":"50507486","parent_id":50502324,"story_id":50499017,"story_title":"Lovable apps expose passport details and more than 200K private messages","story_url":"https://www.crissyfield.de/research/lovable-en/","updated_at":"2026-11-15T17:28:26Z"}],"hitsPerPage":20,"nbHits":369,"nbPages":19,"page":0,"params":"tags=story_50499017&advancedSyntax=true&analyticsTags=backend","processingTimeMS":2,"processingTimingsMS":{"_request":{"queue":1,"roundTrip":15},"afterFetch":{"format":{"highlighting":1,"total":1}},"total":2},"query":"","serverTimeMS":7}