IsakPar

My account was suspended because I was under thirteen when I created it….. 12 years ago

[IsakPar @IsakPar021]

@psincraian Well deserved! Enjoy and see you soon 🏝️

[IsakPar @IsakPar021]

So far I really like 5.6 Sol. Having mainly used cmux, the new ”super app” is really cool. By far the biggest change for me!

[IsakPar @IsakPar021]

Your daily dose of chart crime. Why can’t we have simple charts where you invert the axis or have columns out of scale. Bring back the good old charts!

[Cursor @cursor_ai]

Claude Sonnet 5 is now available in Cursor.

On CursorBench, it's a meaningful step up from Sonnet 4.6: 57% vs. 49%.

[IsakPar @IsakPar021]

@OrcaRouter Sorry but this doesn’t mean anything. It has looked like this since it was removed. Then when you try to use it, ”model unavailable”

[IsakPar @IsakPar021]

@psincraian Agreed, gotta love Barcelona.

[Polar @polar_sh]

Billing before AI asked "what did they pay?"
The new one has to ask "what did they cost?"

Polar asks both.

[tenso @distributedkv]

how it feels to use Opus now

[IsakPar @IsakPar021]

I wonder what will happen after June 22nd

[Polar @polar_sh]

Ingest — Aggregate — Charge 💫

Polar is the financial layer for a new generation of intelligent software.

Ingest LLM Usage events, Aggregate into billable units & Charge your customers automatically.

Get started with Usage Billing today → https://t.co/tBTBEBUctO

[IsakPar @IsakPar021]

And the definition of AGI is what exactly?

[Polymarket @Polymarket]

NEW: Marc Andreessen declares AGI was achieved three months ago.

[IsakPar @IsakPar021]

@JinjingLiang They had 80x annualised growth in Q1 I hardly think they are panicking. Their biggest issue is that they can’t serve enough compute. This will be solved with their new partnership with XAI

[IsakPar @IsakPar021]

Is it just me or does Opus 4.7 feel a lot faster now than it did a week ago?

[IsakPar @IsakPar021]

In his defence, they announced it yesterday. But I am yet to hear any third party verify it. I also requested early access but have not heard anything yet.

[Jun Song @jun_song]

Bro disappeared like he never existed

[IsakPar @IsakPar021]

Ozempic reducing food demand by 850,000+ truckloads a year is insane. At some point this stops being a healthcare story and starts becoming a grocery, snack, and beverage earnings story.

[Polymarket @Polymarket]

JUST IN: New study reveals drugs like Ozempic responsible for >850,000 fewer annual truckloads of food & beverage deliveries in the U.S.

[IsakPar @IsakPar021]

The biggest issue I keep seeing with Opus models is the “pre-existing issue” excuse.

If the code is broken, fix it.
Don’t tell me everything passes when tests are failing just because this session didn’t touch that file.

Broken is broken.

[IsakPar @IsakPar021]

I’ve used Claude Code + Opus every day for months.

Brutally honest take: GPT-5.5 finally made me switch.

Claude still feels better to talk to. It’s warmer, chattier, more natural.

But the performance gap with 5.5 is now too big to ignore. It just gets more real work done.

Still don’t like the codex app though. I am only using the CLI.

[IsakPar @IsakPar021]

@0xwilt @theo Belive me when I say that I want to agree, so far for me I do like CC better can’t wait for it to change though.

[IsakPar @IsakPar021]

“But traditional backend have auth bugs too”

Yes of course they do. But a traditional DB has a server between the user and the database. To leak data, the server has to actively hand over data through a route you wrote.

With RLS the route is already exposed, to leak it you just have to forget to lock it. The default state is open.

[IsakPar @IsakPar021]

Lovable just leaked source code, DB credentials and chat histories for all projects created before November 2025.

Here is my take;

The root cause is not a Lovable problem, it is RLS.

Row Level Security; a SQL policy that you stable to table that says “ only show rows this user owns”. What happens if you forget to staple it? Full access, no error or warning.

[IsakPar @IsakPar021]

Here is how Supabase works under the hood;

Your anon key ships in the client bundle. Visible to everyone, the browser talks to Postgres over HTTP.

The only thing between a user and SELECT * FROM users is an RLS policy you may or may not have written.

Missing one table? That table is now public.

Missing one operation? That operation is now public.

This is not security by default. It is security by remembering.