OMENABYTE.

The Omenabyte Blog

Notes from the build.

Field notes on shipping AI products, securing what you build, and running infrastructure with fewer moving parts. Everything here is tested before it ships — including the parts that turned out to be a bad idea.

All · 11AI · 2Security · 2Databases · 6OSINT · 1
Vibe-coded app security — RLS off, exposed API keys, open database endpoints
LatestSecuritySep 20, 2026 · 9 min read

You're Doing Vibe-Coding Wrong. Here's the 17-Point Fix.

Scanners found 98% of AI-built apps have at least one security flaw. RLS off by default, API keys in JS bundles, open DELETE endpoints. The checklist that closes it.

Read the post →

Security · 2 posts

Be Politely Paranoid — the most dangerous hacker never touched a keyboard
Security

I Watched a Man's Certainty Evaporate in Real Time

The most dangerous hacker in the room never touched a keyboard. Why "I use strong passwords" is the weakest link — from Be Politely Paranoid.

6 min