I’m sick of it, I’m ethical, but let’s be honest to ourselves those shitty NextJS websites business owners, YouTubers, course sellers, etc make are exploitable AF. Like, I never do something but whenever I see a shitty NextJS websites I just can’t help myself to save all the sources and peek a little bit into the sources to see how many potential exploits there are. 9.99/10 times there are a lot and they host it on Vercel or Netlify. Have you ever been rejected by a client and just feel like you should corrupt their database and up their Vercel bill? Like I don’t care I have clients enough but the thigb that irritates me is that everyone thinks you don’t need fundamental understanding of programming anymore because AI knows everything. Like yeah it can pretty much do everything but it’ll create it in the most token efficiënt way so often you see mistakes security wise. We can fix that and make it secure they don’t know what their doing. Just because of that my evil mind sometimes cones up with the idea to corrupt their database and destroy their Vercel bill just so they realize it. Or am I just pure evil. From what I’m seeing at least 45% of the NextJS websites using supabase for their backend have public available read/write rights on their public API key. 10% has their secret exposed. Like the shit people are producing is just funny to me. And I’m coming to a point where I can’t resist the urge to just fuck with it. Am I the only one? submitted by /u/Diligent_Comb5668
Originally posted by u/Diligent_Comb5668 on r/ClaudeCode
What is cliënt?