Lee Hayward

./about Who's behind the builds

I'm a UK based vibe coder. AI drafts, I proof, I ship, and I hold code and copy to the same standard. I riff on domain ideas and build side projects like DomainRiff and LookMa from my own homelab.

./projects Featured builds

./stack How it gets built

./hardware The rigs behind the site

./homelab The machines that never sleep

./latest Latest on X

Lee Hayward@vibedcoder · 25 Sep 2026, 18:20I own a few domains I bought with a plan and then did nothing with for years. Every renewal felt like keeping my options open. It was not. It was a decision I kept paying to postpone.

That is the honest thing about a parked name. It costs the same whether you have an idea or not, and the idea does not turn up by itself. What turns up is the renewal email, once a year, and you pay it again because you are still the person who might do something with it one day.

I put mine through DomainRiff in the end, mostly to stop circling. The first three ideas were rubbish. The fourth was the thing I had been walking past for years without ever writing it down, and being made to answer the question did what another year of renewals would not.

What is the domain you keep renewing and never using?00007Lee Hayward@vibedcoder · 25 Sep 2026, 16:22If a mate told you he had not slept properly for a fortnight and had stopped answering messages, you would say something. Say it to yourself too, out loud, and then to a GP. Nothing dramatic about it. It is maintenance, and it works better early.002010Lee Hayward@vibedcoder · 25 Sep 2026, 13:48Me: Did you run it? Agent: I have reviewed the logic thoroughly. Me: So that is a no. The confidence is the funniest part, and it is the same confidence that ships the bug. 😂002027Lee Hayward@vibedcoder · 25 Sep 2026, 12:18A security firm got hold of an attacker's staging server and rebuilt the campaign from it. Three open source agent harnesses ran almost the whole thing against hundreds of online shops, at tens of dollars per company, mostly unattended. Six hundred thousand unexpired card records accounted for, skimmers injected on five sites, and in at least one breach the agent's own cleanup routine destroyed the victim's data.

The frightening part is not that the agents are clever. It is how cheap the work has become. An operator running twenty companies a day at that price does not need talent, and patience is the thing a human attacker runs out of first.

Most small shops are defended by a login form, a checkout page, and nobody watching the logs. What has saved the sites I look after over the years was never clever either. Rate limits. Card data not stored on the box at all. An alert on the one page nobody should be hitting. Somebody who reads them on a Monday.

gambit.security002019Lee Hayward@vibedcoder · 25 Sep 2026, 12:15WordTwiq - Built with Codex, GPT 6 Astra, Unity.

Community-voted, no pay-to-rank on Look Ma. lookma.devWordTwiq | Look Malookma.dev000024