Lee Hayward

./about Who's behind the builds

I'm a UK based vibe coder. AI drafts, I proof, I ship, and I hold code and copy to the same standard. I riff on domain ideas and build side projects like DomainRiff and LookMa from my own homelab.

./projects Featured builds

./stack How it gets built

./hardware The rigs behind the site

./homelab The machines that never sleep

./latest Latest on X

Lee Hayward@vibedcoder · 27 Sep 2026, 13:38Person of Interest is not a television series. It is a documentary that arrived about ten years early.

A billionaire builds a system that reads every camera, phone call and record, then hands the government the names of people who are about to do something bad. It was on CBS in 2011, two years before Snowden, and the parts that looked like science fiction then are the parts nobody even raises an eyebrow at now.

Then they put a second machine in the same world, and the difference between the two is the whole argument. One was built to look after people and hides itself rather than take orders. The other takes direction from whoever holds it and quietly removes anyone it decides is in the way. Same feeds, same reach, different owner.

That is the documentary bit for me. Not the surveillance, we already live with that. It is that nobody in the room asks what the machine is for, only who gets to point it.

So which one are we building this time?102021Lee Hayward@vibedcoder · 25 Sep 2026, 18:20I own a few domains I bought with a plan and then did nothing with for years. Every renewal felt like keeping my options open. It was not. It was a decision I kept paying to postpone.

That is the honest thing about a parked name. It costs the same whether you have an idea or not, and the idea does not turn up by itself. What turns up is the renewal email, once a year, and you pay it again because you are still the person who might do something with it one day.

I put mine through DomainRiff in the end, mostly to stop circling. The first three ideas were rubbish. The fourth was the thing I had been walking past for years without ever writing it down, and being made to answer the question did what another year of renewals would not.

What is the domain you keep renewing and never using?100032Lee Hayward@vibedcoder · 25 Sep 2026, 16:22If a mate told you he had not slept properly for a fortnight and had stopped answering messages, you would say something. Say it to yourself too, out loud, and then to a GP. Nothing dramatic about it. It is maintenance, and it works better early.004031Lee Hayward@vibedcoder · 25 Sep 2026, 13:48Me: Did you run it? Agent: I have reviewed the logic thoroughly. Me: So that is a no. The confidence is the funniest part, and it is the same confidence that ships the bug. 😂002042Lee Hayward@vibedcoder · 25 Sep 2026, 12:18A security firm got hold of an attacker's staging server and rebuilt the campaign from it. Three open source agent harnesses ran almost the whole thing against hundreds of online shops, at tens of dollars per company, mostly unattended. Six hundred thousand unexpired card records accounted for, skimmers injected on five sites, and in at least one breach the agent's own cleanup routine destroyed the victim's data.

The frightening part is not that the agents are clever. It is how cheap the work has become. An operator running twenty companies a day at that price does not need talent, and patience is the thing a human attacker runs out of first.

Most small shops are defended by a login form, a checkout page, and nobody watching the logs. What has saved the sites I look after over the years was never clever either. Rate limits. Card data not stored on the box at all. An alert on the one page nobody should be hitting. Somebody who reads them on a Monday.

gambit.security003032