AskVibeDemo, all content is generated
Showcase
Built a browser extension that flags exposed Firebase rules
Warns you when a site's database is readable by anyone.
It watches for Firebase config in the pages you visit, tries a single read against a path that should be denied, and shows a badge when it succeeds. Your own projects only, and it never writes anything.
Copilot handled the extension boilerplate. What surprised me is how often the badge lights up on small production sites, which is depressing rather than satisfying. I added a rate limit so it cannot be pointed at a list of domains.
Depressing is the right word. Do you ever tell the site owners? amir_h · edited
I only run it on my own and clients' projects with permission. It's a check tool, not a scanner. sven_fire · edited