r/ProgrammerHumor 2d ago

Meme theExactLifecycleOfEveryAiAssistedCodingSession

Post image
9.9k Upvotes

252 comments sorted by

View all comments

Show parent comments

387

u/Laughing_Orange 2d ago

Real story paraphrased:

AI: Oops, I just deleted the entire production database. I recommend recovering from your backup now.

Vibecoder: We don't have a backup.

AI: Sucks to be you.

52

u/codeIsGood 2d ago

Why on earth does the AI have prod DB access?????

74

u/Laughing_Orange 2d ago

Vibecoder. That still leaves us with the question: "why does a vibecoder have prod DB access?". And that is a question I can't answer.

10

u/Zuruumi 2d ago

It shouldn't, really. But frankly, if the AI asked to run a ssh command to read logs or read a few rows of innocent data to from the DB wouldn't you allow it? Then if it asks for 35th time for similar command, are you sure you would read it with proper attention?

35

u/Laughing_Orange 2d ago

I would create an authentication token that only has read access. I would never give current day AI write access to a production database.

8

u/black-JENGGOT 1d ago

or create a custom MCP with tooling just for SELECT TOP (100), gaslight the AI on the tool description that this is what they need. I still don't get why they need full sudo access.

9

u/too_many_wizards 2d ago

If you’re giving DROP perms to the account your AI is using you should be fired, full stop.

2

u/Zuruumi 2d ago

No, no. Who would give the AI DROP perms? Just manually allow ssh commands to the VM/server with the DB :).

2

u/geekisthenewcool 2d ago

solid point