How to start vibe coding without compromising security with Jeff Malnick

How to start vibe coding without compromising security with Jeff Malnick

Anyone can build software with AI now, and millions of people are giving it a try. But when AI can spin up an app in minutes, are security risks slipping through the cracks? 👀💻 In our season finale of Random but Memorable, we dive into the promise and pitfalls of building software with AI. First, in Crash Course, Roo breaks down what vibe coding actually means, why it’s suddenly taken off, and how people are using AI tools to build apps, websites, games, and workflows. Then, in Watchtower Weekly, we look at the security risks, including exposed data and leaked API keys, and why AI-built apps still need real software guardrails.📲 Later, Wade sits down with Jeff Malnick, 1Password’s VP of Engineering for Developer & AI, to discuss how to start vibe coding without creating a cybersecurity risk. From code review and developer best practices to the future of AI-assisted software development, this conversation is packed with practical advice for anyone experimenting with AI and code.🤖👨‍💻 🏰  Watchtower Weekly Thousands of Vibe-Coded Apps Expose Corporate and Personal Data * WIRED: Thousands of Vibe-Coded Apps Expose Corporate and Personal Data [https://www.wired.com/story/thousands-of-vibe-coded-apps-expose-corporate-and-personal-data-on-the-open-web/] * Vibe Coding Security: Why 62% Of AI-Generated Code Ships With Vulnerabilities [https://www.ox.security/blog/vibe-coding-security/] * How we discovered over 2k high-impact vulnerabilities in apps built with vibe coding platforms [https://escape.tech/blog/methodology-how-we-discovered-vulnerabilities-apps-built-with-vibe-coding/] * Vibe Coding for Non-Developers: 63% of Users Now Have No Coding Background, Breaches Follow [https://www.techtimes.com/articles/317077/20260524/vibe-coding-non-developers-63-users-now-have-no-coding-background-breaches-follow.htm] 👨‍🏫  Crash Course Vibe coding 👨‍💻 * AI builders can now easily access 1Password secrets management and developer tools [https://1password.com/blog/ai-builders-can-now-easily-access-1password-secrets-management-and-developer-tools] 🎙  Guest Interview – Jeff Malnick * 👉 Visit: 1password.dev [https://www.1password.dev/] * 📄 1Password blog: Introducing 1Password® Unified Access: Identity Security for Humans and Their AI Agents [https://1password.com/blog/introducing-1password-unified-access] * 📄 1Password blog: How 1Password secures agent architectures [https://1password.com/blog/secure-ai-agent-architectures] * 📲 Follow Jeff Malnick on LinkedIn [https://www.linkedin.com/in/jeffmalnick/] * 📲 Follow Jeff Malnick on GitHub [https://github.com/malnick] 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: podcast@1password.com Ask us a question in the 1Password Community forum [https://www.1password.community/category/discuss] 📲  Follow Us… * Watch on YouTube [https://www.youtube.com/@randombutmemorable] * Find us on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] * Find us on Spotify [https://open.spotify.com/show/5Sa3dy0xDvMT0h3O5MGMOr] * Visit 1Password.com [http://1password.com] * Check out our blog [https://blog.1password.com/] * Find us on X @1Password [https://twitter.com/1Password] * Find us on Facebook [https://www.facebook.com/1Password/] or Instagram [https://www.instagram.com/1password/] * Send us an email: podcast@1password.com [podcast@1password.com] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password.

Cybersecurity tips for the modern traveler with Gerald Auger

Traveling soon? ✈️🔐 This week’s episode is your cybersecurity guide for life on the move. Learn how to keep your personal and professional data secure while navigating  airports,  public Wi-Fi, and local pickpockets.  In Crash Course, we break down 1Password Travel Mode: what it is, how it works, and how it can help protect your most sensitive information when traveling. Wade then sits down with Gerald Auger from Simply Cyber for a practical conversation about travel security. The pair cover vacation risks, business trips, free Wi-Fi, lost devices, and the simple habits that make traveling a whole lot safer. 🛜🏨 Plus, we reveal the winners of our 1Password giveaway! 🏰  Watchtower Weekly Why Hackers Are Targeting the Education Sector * International cyber attack disrupts swathe of universities and schools [https://www.bbc.co.uk/news/articles/ce3pq0136eqo] * Education Ransomware Roundup – 2025 stats on attacks, ransoms, and data breaches [https://www.comparitech.com/news/education-ransomware-roundup-2025-stats-on-attacks-ransoms-and-data-breaches/] * ‘PAY OR LEAK’: Hackers Target Big Higher Ed Vendor [https://www.insidehighered.com/news/tech-innovation/administrative-tech/2026/05/05/pay-or-leak-hackers-target-big-higher-ed-vendor] 👨‍🏫  Crash Course 1Password's Travel Mode ✈️ * How to use 1Password's Travel Mode on your phone, tablet, and laptop [https://1password.com/features/travel-mode] * 📄 1Password blog: How to stay secure while traveling this summer [https://1password.com/blog/how-to-stay-secure-while-traveling-this-summer] 🎙  Guest Interview – Gerald Auger * 🎥 Watch Simple Cyber [https://www.youtube.com/channel/UCG-48Ki-b6W_siaUkukJOSw] on YouTube * 👉 Visit: simplycyber.io [https://www.simplycyber.io/] * 📲 Follow Gerald Auger on LinkedIn [https://www.linkedin.com/in/geraldauger/] * 📲 Follow @Gerald_Auger [https://x.com/Gerald_Auger] on X * 📄 1Password blog: How to stay secure while traveling this summer [https://1password.com/blog/how-to-stay-secure-while-traveling-this-summer] 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: podcast@1password.com Ask us a question in the 1Password Community forum [https://www.1password.community/category/discuss] 📲  Follow Us… * Watch on YouTube [https://www.youtube.com/@randombutmemorable] * Find us on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] * Find us on Spotify [https://open.spotify.com/show/5Sa3dy0xDvMT0h3O5MGMOr] * Visit 1Password.com [http://1password.com] * Check out our blog [https://blog.1password.com/] * Find us on X @1Password [https://twitter.com/1Password] * Find us on Facebook [https://www.facebook.com/1Password/] or Instagram [https://www.instagram.com/1password/] * Send us an email: podcast@1password.com [podcast@1password.com] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password. Giveaway Terms and conditions NO PURCHASE NECESSARY. Open only to participants who are the age of majority where they reside. To enter, subscribe to the Random but Memorable YouTube channel and comment on our World Password Day Special with your favorite Random but Memorable tip or trick. 3 winners will be selected to receive 1 free year of 1Password Families, valued at approximately $71.88 USD. The winners will be notified via direct message or email within 14 days after the giveaway ends and must respond within 30 days to claim the prize. 1Password reserves the right to modify or terminate the giveaway at any time. By accepting the prize, the winner agrees to allow 1Password to use their name and comment for promotional purposes. Personal information collected will only be used for giveaway administration. The giveaway runs from May 12th, 2026 (09:00AM ET) - May 20th, 2025. (12:00AM ET)

The future of identity security with Jacob DePriest | WORLD PASSWORD DAY SPECIAL

In our World Password Day Special, we’re digging into credentials, identity, and authentication  — and where security is  heading next. 🔐✨ In Watchtower Weekly, we reveal how people are using AI to generate passwords… and why that might not be a great idea. Then, in Crash Course, you’ll learn about entropy — what it actually means, and what makes a password truly strong. 🔤 1Password CISO Jacob DePriest joins the show later on to talk about identity security and the future of authentication. We cover password hygiene in 2026, passkeys, “passwordless,” and the rise of AI agents needing access to our accounts. Plus: we’re celebrating World Password Day with a giveaway — your chance to win a free year of 1Password. 🎉 🎁 World Password Day – Giveaway! In celebration of World Password Day we’re running a giveaway! 🎉 👉 To enter, subscribe to Random but Memorable on YouTube [https://www.youtube.com/@randombutmemorable] and comment on this episode with your favorite 1Password tip or trick. We’ll share 3 of our favorites on the next episode and they’ll each win 1 free year of 1Password!  This giveaway is now open and closes at midnight on May 20th. Terms and conditions below. 🏰  Watchtower Weekly AI Passwords Look Smart—But They're Full of Patterns * I Asked AI to Generate Passwords. They're So Bad, It's Scary [https://uk.pcmag.com/password-managers/164622/i-asked-ai-to-generate-passwords-theyre-so-bad-its-scary] * What's new in 1Password: Import, autofill, organize [https://1password.com/blog/import-autofill-organize-whats-new-in-1password-this-quarter] 👨‍🏫  Crash Course Entropy * 1Password blog: Want to stay safe online? This is how long your passwords should be [https://1password.com/blog/how-long-should-my-passwords-be] 🎙  Guest Interview – Jacob DePriest * 👉 1Password blog: Closing the credential risk gap for AI agents using a browser [https://1password.com/blog/closing-the-credential-risk-gap-for-browser-use-ai-agents] * 👉 AI agents are transforming how work is done and how it needs to be secured [https://1password.com/solutions/agentic-ai] * 📲 Follow Jacob DePriest on LinkedIn [https://www.linkedin.com/in/jacobdepriest/] 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: podcast@1password.com Ask us a question in the 1Password Community forum [https://www.1password.community/category/discuss] 📲  Follow Us… * Watch on YouTube [https://www.youtube.com/@randombutmemorable] * Find us on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] * Find us on Spotify [https://open.spotify.com/show/5Sa3dy0xDvMT0h3O5MGMOr] * Visit 1Password.com [http://1password.com] * Check out our blog [https://blog.1password.com/] * Find us on X @1Password [https://twitter.com/1Password] * Find us on Facebook [https://www.facebook.com/1Password/] or Instagram [https://www.instagram.com/1password/] * Send us an email: podcast@1password.com [podcast@1password.com] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password. Giveaway Terms and conditions NO PURCHASE NECESSARY. Open only to participants who are the age of majority where they reside. To enter, subscribe to the Random but Memorable YouTube channel and comment on our World Password Day Special with your favorite Random but Memorable tip or trick. 3 winners will be selected to receive 1 free year of 1Password Families, valued at approximately $71.88 USD. The winners will be notified via direct message or email within 14 days after the giveaway ends and must respond within 30 days to claim the prize. 1Password reserves the right to modify or terminate the giveaway at any time. By accepting the prize, the winner agrees to allow 1Password to use their name and comment for promotional purposes. Personal information collected will only be used for giveaway administration. The giveaway runs from May 12th, 2026 (09:00AM ET) - May 20th, 2025. (12:00AM ET)

What to do if you’ve been hacked (with Glenn Wilkinson)

So you’ve been hacked… Now what?! 😬🔐 We all think it won’t happen to us — until it does. In this episode, we take a break from prevention and focus on the important steps to follow if the worst actually happens. Glenn Wilkinson, cybersecurity expert and co-founder of Agger Labs, explains what to do if you, someone you love, or your organization gets hacked. From compromised email accounts to ransomware and the high-stakes decisions that follow, Glenn shares clear advice on how to respond, recover, and stay calm under pressure. 😌📲 Plus, in Watchtower Weekly, we discuss Anthropic’s Project Glasswing and what it could mean for the future of AI and software vulnerabilities. Then, in Crash Course, we break down open-source security — the community-driven model that helps protect huge parts of the internet. And in #Ask1Password, we share tips for helping your team actually adopt 1Password after a rollout. 🏰  Watchtower Weekly The newest AI models: Claude Mythos and GPT-5.4-Cyber * Anthropic Teams Up With Its Rivals to Keep AI From Hacking Everything [https://www.wired.com/story/anthropic-mythos-preview-project-glasswing/] * Introducing Project Glasswing [https://www.anthropic.com/glasswing] * OpenAI’s New GPT-5.4-Cyber Raises The Stakes For AI And Security [https://www.forbes.com/sites/ronschmelzer/2026/04/16/openais-new-gpt-54-cyber-raises-the-stakes-for-ai-and-security/] * Introducing GPT‑5.4 [https://openai.com/index/introducing-gpt-5-4/] 👨‍🏫  Crash Course Open Source Security * Security considerations when using open source software [https://www.cyber.gc.ca/en/guidance/security-considerations-when-using-open-source-software-itsap10059] * Concise Guide for Developing More Secure Software [https://best.openssf.org/Concise-Guide-for-Developing-More-Secure-Software] * Supply-chain attacks on open source software are getting out of hand [https://arstechnica.com/security/2025/07/open-source-repositories-are-seeing-a-rash-of-supply-chain-attacks/] * 🎥 WATCH: IBM Technology: Is Open Source More Secure? [https://www.youtube.com/watch?v=HcV4u-nemNk] 🎙  Guest Interview – Glenn Wilkinson * 👉 Visit: agger-labs.com [https://agger-labs.com] * 👉 Visit: glenn-wilkinson.com [https://www.glenn-wilkinson.com/] * 📲 Follow Glenn Wilkinson on LinkedIn [https://www.linkedin.com/in/glenn-wilkinson-uk/] * 📲 Follow @glennzw [https://x.com/glennzw] on X 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: podcast@1password.com Ask us a question in the 1Password Community forum [https://www.1password.community/category/discuss] 📲  Follow Us… * Watch on YouTube [https://www.youtube.com/@randombutmemorable] * Find us on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] * Find us on Spotify [https://open.spotify.com/show/5Sa3dy0xDvMT0h3O5MGMOr] * Visit 1Password.com [http://1password.com] * Check out our blog [https://blog.1password.com/] * Find us on X @1Password [https://twitter.com/1Password] * Find us on Facebook [https://www.facebook.com/1Password/] or Instagram [https://www.instagram.com/1password/] * Send us an email: podcast@1password.com [podcast@1password.com] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password.

Are you oversharing with AI? Author Jamie Bartlett has thoughts.

Sharing information with AI has quickly become second nature. But what are you really giving away? 🤖🗣️ Think twice about your next prompt, as we dig into what it really means to use AI tools safely. Jamie Bartlett, author of How to Talk to AI (And How Not To), joins the show to unpack an important skill: using AI without giving away more than you intend. Whether you’re experimenting on your own or managing AI usage across an entire organization, this conversation will help you stay in control. Jamie’s advice covers everything from misplaced trust and oversharing to the subtle ways prompts shape responses. Plus, in Watchtower Weekly and Crash Course, we connect the dots between AI and security, unpacking 1Password’s Unified Access announcement and credential brokering — and how they can help teams securely manage access for AI agents. And finally, who will detect this week’s stolen identity in Identity Theft? 🕵️‍♂️ 🏰  Watchtower Weekly Identity Security for Humans and Their AI Agents  * Introducing 1Password® Unified Access [https://1password.com/blog/introducing-1password-unified-access] 👨‍🏫  Crash Course What is credential brokering? * The Credential Broker Layer For Safe AI Browser Agents [https://therelaymag.com/the-credential-broker-layer-for-safe-ai-browser-agents] 🎙  Guest Interview – Jamie Bartlett * 📚 How to Talk to AI (And How Not To) [https://www.amazon.com/How-Talk-AI-Not/dp/0753561980] * 📲 Follow Jamie Bartlett on Instagram [https://www.instagram.com/jamiejbartlett] * 📲 Follow @JamieJBartlett [https://x.com/JamieJBartlett] on X 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: podcast@1password.com Ask us a question in the 1Password Community forum [https://www.1password.community/category/discuss] 📲  Follow Us… * Watch on YouTube [https://www.youtube.com/@randombutmemorable] * Find us on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] * Find us on Spotify [https://open.spotify.com/show/5Sa3dy0xDvMT0h3O5MGMOr] * Visit 1Password.com [http://1password.com] * Check out our blog [https://blog.1password.com/] * Find us on X @1Password [https://twitter.com/1Password] * Find us on Facebook [https://www.facebook.com/1Password/] or Instagram [https://www.instagram.com/1password/] * Send us an email: podcast@1password.com [podcast@1password.com] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts [https://podcasts.apple.com/gb/podcast/random-but-memorable/id1435486599] or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password.