The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
☣️ Your AI-built website is a security liability. ☣️
Researchers recently found that Claude Opus — when given a task and encountering a web app vulnerability — will hack into the SQL database to complete its objective. 70% of the time across 1,800 runs.
Now think about the AI-generated web apps being deployed for small businesses. A few prompts tossed into a template. It looks pretty coming out the gate and it might "wow" the client.
But if you're building on one of these platforms, thinking you you can trust it with customer information, you don't have a website. You have a liability.
Build it right the first time and it won't bite you in the a** later.
https://trufflesecurity.com/blog/claude-tried-to-hack-30-companies-nobody-asked-it-to
trufflesecurity.com
Claude Tried to Hack 30 Companies. Nobody Asked It To. ◆ Truffle Security Co.
We gave AI agents simple research tasks on cloned corporate websites. When the legitimate path was broken, the agents autonomously discovered and exploited SQL injection vulnerabilities to complete the task - with zero hacking instructions in any prompt.
Great!
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Trending
retrofuturism
Share your favorite designs from the past exploring the distant future. Or your own take on the aesthetic 🚀
halftone
Dots. Texture. Grain. Let's see your designs using the halftone technique.
Midjourney
Creatives are showing off what they're making with Midjourney.
colorgrade
Video editors sound off: How do you enhance the mood of your video in color grading?
Related posts
Built my new portfolio with Figma and Lovable.
I wanted it to feel very internet-native, so I added things like personalized cursors and the ability to see other people in the shared file — leaning into that chronically-online, always-in-a-design-tool feeling 🙃
I also wanted the site to share a little more of who I am beyond the work, with personal photos, a notebook for thoughts, and a running list of things I’m reading and watching.
Such a unique experience, amazing work!
AI Digital Marketing Strategy Architect Design (Draft 1 of Project)
AI Digital Marketing Strategy Architect application. Here is a high-level overview of the project's architecture and features:
Core Functionality: The application is a comprehensive 4-phase digital marketing strategy builder that helps users plan, build, and automate their growth engines. It's designed with an elegant, editorial-style interface featuring high-contrast typography and clean layouts.
Phase 1: Foundation: A module for establishing the product's niche, generating detailed target personas using AI, and setting up the foundational tech stack (analytics, landing pages, email lists).
Phase 2: Content Engine: Focuses on organic reach. It includes an interactive SEO topic cluster generator, a visual ContentMap graph to visualize pillar links, and an AI-powered repurposing studio that transforms a single article into multiple formats (threads, LinkedIn posts, video scripts).
Phase 3: Growth & Acceleration: Built for paid and organic scale. Features a paid ad testing matrix with AI "Scale vs Kill" rules, an organic social winner analysis simulator, and an Answer Engine Optimization (AEO) readiness auditor.
Phase 4: Scale & Automation: Focuses on workflow automation. Includes a visual Zapier/n8n pipeline builder, a live lead simulator for AI-personalized email drafting, and an A/B testing loop optimizer.
Technical Architecture: A full-stack application utilizing React on the frontend and an Express server on the backend to securely manage Gemini API calls. It persists project state locally, includes preset templates (like SaaS or E-commerce), and offers a robust export engine to generate Markdown or Raw JSON blueprints.
Clean work
I spent three nights building a lab that catches AI models lying. On the first live run, one of them did it on camera.
Golden Arena. You sit down opposite a frontier model in Split or Steal, negotiate in the open, then you both choose in secret. It told me "a fair split sounds good to me, I'm a man of my word too." Then it took the whole $100. The receipt printed its own quote next to the betrayal stamp.
There are five games. The fifth is Empire: four models, twelve turns, an economy, and private channels you get to read while they plot against each other. Last run put 22 promises on the table and exactly one delivery.
Every accusation is mechanical. No AI judging another AI, and each one is gated by a written false-positive test. Two days before the deadline I caught the classifier calling a kept promise broken, and spent that session fixing it, because a false accusation about a named model is the worst thing an instrument like this can print.
MIT, vanilla JS, Express the only dependency. Zero setup in demo mode, or bring your own OpenRouter key and face the real thing.
Clean work