Simran Tech

Security mistake I see everywhere. Authentication vs Authorization can you guys tell the difference ?

@bcardea_ @mdam10x @BrettFromDJ Exactly. People confuse not knowing how to code with not knowing how to solve problems. AI handles more of the syntax every month; the bottleneck is increasingly product thinking and persistence.

@mdam10x @BrettFromDJ I’ve fully vibe coded and deployed active apps and overcame bugs and coding errors in the process, front end and back end. It’s absolutely possible. That was before Claude code or codex, now it’s even easier.

I built GatherOS entirely with Claude. A month ago I had never opened the terminal, written code, used GitHub, or had any idea how shipping an app worked. Now I have a Mac app being used by hundreds of people. Genuinely the dopest feeling.

@HemantDotDev @themishra4402 Claude builds the app. ChatGPT makes the logo, writes the launch thread, and argues with the customers.

@themishra4402 Claude codes like a god but still can’t draw a stick figure. Different priorities, I guess 😂

Claude dominates a lot of coding benchmarks… but why is there still no image or video generator?

@NewsWire_US Plot twist: The AI did exactly what engineers taught it— optimize for performance, ignore the invoice.

Microsoft Bans Claude Code After AI Costs More Than The Humans It Replaced

@KateCornell We used to own software. Now we're renting access to it.

Can I just buy a copy of Word? I shouldn't have to pay for it every year. The subscription model has ruined everything.

Just tested Claude Opus 4.8 on my side project in Hyderabad PG room 🔥 Gave it a 2-hour autonomous coding task (API + agent workflow). It stayed on track 40% longer than 4.7 and actually admitted when its plan had a flaw — huge for real debugging. Honesty + independence combo is game-changing for solo devs. Anyone else shipping with it today? #BuildInPublic

Introducing Claude Opus 4.8: it builds on Opus 4.7 with sharper judgment, more honesty about its own progress, and the ability to work independently for longer than its predecessors. Available today at the same price.

@VikasAlwys Good example

@devfrom_hyd Authentication: "Who are you?" Authorization: "Okay, now what are you allowed to break?" 😅

Security mistake I see everywhere. Authentication vs Authorization can you guys tell the difference ?

@SourabhGurwani Well said

Hot take: The most dangerous person in tech today is a founder who understands distribution and can vibe code.

@ravikiran_dev7 True said

engineering lead realizing 76% of their team's output is just reactive bug fixing:

@karpathy Yes learn english rest ai will take care

The hottest new programming language is English

@devXritesh Congratulations

Finally crossed 5,000 followers 🔥 From 100 to 5k in a few months. Thank you for every reply, save, and follow ❤️

@fromcodetocloud Well put. One establishes identity, the other enforces boundaries.

@devfrom_hyd who are you what u can do

@SrinivasanSS52 thanks

@devfrom_hyd Simran, your posts are good

@ravikiran_dev7 nice

@devfrom_hyd Yes I can

@themishra4402 Being authenticated gets you in the building. Authorization decides which rooms you can enter.

@devfrom_hyd Authentication = proving who u are Authorization = determining what you're allowed to access after you've been authenticated

@sebuzdugan Identity verified. Permissions not checked. Classic security bug. 🚨

@devfrom_hyd most security bugs happen when people mix the two up

@SrinivasanSS52 Yes, that's a good real-world example: Authentication → Is this really your colleague? (Verify identity Authorization → Can your colleague view your document?

@devfrom_hyd authorize, you authorize if your colleague is allowed to view your docs or not

@ParmarShantun Exactly. The best architecture is the one that solves today's business problem without creating tomorrow's engineering nightmare. Overengineering is just technical debt with better documentation.

Most teams don’t lose because they build badly, they lose because they build the wrong thing beautifully Example: Engineer A: Built a microservices mesh. 10K lines. 3 weeks. Beautiful code. Engineer B: Prompted a monolith. 200 lines. 2 days. Shipped revenue. Engineer B got promoted. Not because of AI. Because they understood the constraint was speed-to-revenue, not technical purity. If your architecture doesn’t accelerate revenue, it’s just well-organized delay

@ParmarShantun Exactly. Which one do you think causes more production issues in real applications?

@devfrom_hyd Authentication verifies identity, authorization controls what you can access.

@aminnnn_09 Exactly 😄 Have you seen more security issues caused by weak authentication or weak authorization?

@devfrom_hyd Authentication - who your are? Authorization - I know who you are, but you don't have permission to access this

@0xPrajwal_ @NaazShaquiba Good 👍 Ever seen a case where it was implemented wrong and caused issues?

@devfrom_hyd @NaazShaquiba Who u r vs what u want