Pon

I build apps with AI, then hunt the security holes it leaves behind. Scanned 830 public Supabase repos in a sandbox; 309 leaked rows to a plain anon key. Happy to scan yours free — email me.

Joined on Jun 26, 2026 pon@vollos.ai https://lens.vollos.ai/sample

Pon

Aug 4

Your Supabase notifications table has RLS on. Anyone signed in can still write into someone else's inbox.

#supabase #postgres #security #webdev

3 min read

Want to connect with Pon?

Create an account to connect with Pon. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Pon

Jul 23

This endpoint has auth. The tests are green. It still lets a user hand themselves admin.

#security #webdev #node #javascript

3 min read

Pon

Jul 6

My public view leaked every user's email. The AI called it "partial user data."

#supabase #postgres #security #webdev

3 min read

Pon

Jun 29

I shipped a Supabase app last month and left the front door open for weeks

#ai #security #webdev #supabase

3 min read

DEV Community

Pon

Badges

4 Week Community Wellness Streak

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Your Supabase notifications table has RLS on. Anyone signed in can still write into someone else's inbox.

Want to connect with Pon?

This endpoint has auth. The tests are green. It still lets a user hand themselves admin.

My public view leaked every user's email. The AI called it "partial user data."

I shipped a Supabase app last month and left the front door open for weeks