this post was submitted on 08 Aug 2025
247 points (81.1% liked)

Privacy

40633 readers
1238 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

cross-posted from: https://lemmy.dbzer0.com/post/50693956

TranscriptA post by [object Object] (@zzt@mas.to) saying: courtesy of @davidgerard@circumstances.run, Proton is now the only privacy vendor I know of that vibe codes its apps: In the single most damning thing I can say about Proton in 2025, the Proton GitHub repository has a “cursorrules” file. They’re vibe-coding their public systems. Much secure! I am once again begging anyone who will listen to get off of Proton as soon as reasonably possible, and to avoid their new (terrible) apps in any case. https://circumstances.run/@davidgerard/114961415946154957

It has a reply by the author saying: in an unsurprising update for those familiar with how Proton operates, they silently rewrote their monorepo’s history to purge .cursor and hide that they were vibe coding: https://github.com/ProtonMail/WebClients/tree/2a5e2ad4db0c84f39050bf2353c944a96d38e07f

given the utter lack of communication from Proton on this, I can only guess they’ve extracted .cursor into an external repository and continue to use it out of sight of the public

(page 2) 46 comments
sorted by: hot top controversial new old
[–] HappyFrog@lemmy.blahaj.zone 11 points 1 day ago

I can believe that someone at proton vibecodes, and that their files got ob to the tree, but saying that proton as a whole does it is strange.

[–] privacydingus@lemmy.ml 9 points 1 day ago

Using Cursor =/= "Vibe Coding" people need to really stop with getting jumpy about everything in such a way.

It might have been that some employee just tried out cursor and accidentally added it to the repo. That is true.

However the complete lack of communication suggests otherwise. And depending on your threat level you should always assume worst.

As for the use of ai in general, in my opinion there are occasional places where ai can be used without compromising security.

So depending on your threat level this can actually ne a big deal.

[–] vhstape@lemmy.sdf.org 6 points 1 day ago (1 children)

I’m not sure why being a “privacy vendor” forbids you from using AI tools in your development process

[–] ShoeThrower@lemmy.zip 9 points 1 day ago (2 children)

You are buying a bicycle online.

Both are the same price, but one is handmade by a skilled professional with decades of experience, the other is made by a sketchy machine that even it's creators don't really understand... and sometimes uses square wheels instead of round.

Your choice.

[–] Rolder@reddthat.com 5 points 1 day ago

I see their repo is open source. Is there any actual evidence that the sketchy machine generated any part of it?

[–] vhstape@lemmy.sdf.org 0 points 1 day ago (1 children)

But what does that have to do with consumer privacy?

[–] hyacin@lemmy.ml 1 points 1 day ago

"consumer privacy" in this case would be your safety while on said bicycle, imo, and square wheels will send you for a tumble.

AI slop comes with security holes (see recent Tea business, and countless other examples). As a user of Proton services, paying actually quite a bit of money annually for that — and being that they talk a really big game about how secure and private they are — I expect their app to be MORE secure than your average mail client, not the same, and not very possibly LESS secure.

[–] flandish@lemmy.world 6 points 1 day ago* (last edited 1 day ago) (2 children)

what is a cursorfile? I’ve hit things like gpt when devdocs.io isn’t getting me what I want because lots of search engine things like “explain the google maps api” are becoming like searching for a dinner recipe; they contain 300 paragraphs of life story. When I just want to actually RTFM and shit’s hard to find. I don’t copy/paste code into projects just try to find better manuals.

[–] irelephant@lemmy.dbzer0.com 9 points 1 day ago (2 children)

Cursor is a vscode fork with Ai features, cursorrules is a config file for it.

[–] flandish@lemmy.world 2 points 1 day ago

gotcha. thanks!

[–] akilou@sh.itjust.works -3 points 1 day ago (1 children)

VS Code also has AI features. Would you be telling people to not use other suites if they were being developed in VS Code? Why should they be forced to use an IDE that explicitly excludes AI?

[–] irelephant@lemmy.dbzer0.com 2 points 1 day ago (1 children)

Is vscode marketed as an ai code editor?

[–] tyler@programming.dev 4 points 1 day ago (1 children)
[–] irelephant@lemmy.dbzer0.com 1 points 1 day ago (1 children)

Poor choice of words, what's the appeal of cursor over vscode? the ai features.

[–] tyler@programming.dev 1 points 1 day ago

Pretty sure they both have the same AI features

load more comments (1 replies)
[–] bitjunkie@lemmy.world 4 points 1 day ago

I thought this was the gaming compatibility layer at first

[–] cupcakezealot@piefed.blahaj.zone 0 points 1 day ago (1 children)

not surprising when you know who andy yen is.

[–] sunzu2@thebrainbin.org 7 points 1 day ago

God banned on proton sub for calling out this poor CEO's antics

They love free speech when they charge you money but no when you express your opinions online about their product and "leadership" 🤡

Years and still no contacts, I am making plans to move again

Never do one stop shop services people!!! Google and apple should have already taught you that

load more comments
view more: ‹ prev next ›