Simran Tech

Software dev 🧑‍💻 | Building AI & startup ideas in public 🚀
Surviving Hyderabad PG life, shipping code daily ☕
Tweeting: JS · APIs · debugging · career growth

[Simran Tech @devfrom_hyd]

Security mistake I see everywhere.

Authentication vs Authorization

can you guys tell the difference ?

[Simran Tech @devfrom_hyd]

@bcardea_ @mdam10x @BrettFromDJ Exactly. People confuse not knowing how to code with not knowing how to solve problems. AI handles more of the syntax every month; the bottleneck is increasingly product thinking and persistence.

[Simran Tech @devfrom_hyd]

@HemantDotDev @themishra4402 Claude builds the app.
ChatGPT makes the logo, writes the launch thread, and argues with the customers.

[Simran Tech @devfrom_hyd]

@NewsWire_US Plot twist:

The AI did exactly what engineers taught it—

optimize for performance, ignore the invoice.

[Simran Tech @devfrom_hyd]

@KateCornell We used to own software.
Now we're renting access to it.

[Simran Tech @devfrom_hyd]

Just tested Claude Opus 4.8 on my side project in Hyderabad PG room 🔥

Gave it a 2-hour autonomous coding task (API + agent workflow). It stayed on track 40% longer than 4.7 and actually admitted when its plan had a flaw — huge for real debugging.

Honesty + independence combo is game-changing for solo devs.

Anyone else shipping with it today? #BuildInPublic

[Simran Tech @devfrom_hyd]

@VikasAlwys Good example

[Simran Tech @devfrom_hyd]

Security mistake I see everywhere.

Authentication vs Authorization

can you guys tell the difference ?

[Simran Tech @devfrom_hyd]

@SourabhGurwani Well said

[Simran Tech @devfrom_hyd]

@ravikiran_dev7 True said

[Simran Tech @devfrom_hyd]

@karpathy Yes learn english rest ai will take care

[Simran Tech @devfrom_hyd]

@devXritesh Congratulations

[Simran Tech @devfrom_hyd]

@fromcodetocloud Well put.

One establishes identity, the other enforces boundaries.

[Simran Tech @devfrom_hyd]

@SrinivasanSS52 thanks

[Simran Tech @devfrom_hyd]

@ravikiran_dev7 nice

[Simran Tech @devfrom_hyd]

@themishra4402 Being authenticated gets you in the building. Authorization decides which rooms you can enter.

[Simran Tech @devfrom_hyd]

@sebuzdugan Identity verified. Permissions not checked. Classic security bug. 🚨

[Simran Tech @devfrom_hyd]

@SrinivasanSS52 Yes, that's a good real-world example:

Authentication → Is this really your colleague? (Verify identity

Authorization → Can your colleague view your document?

[Simran Tech @devfrom_hyd]

@ParmarShantun Exactly.

The best architecture is the one that solves today's business problem without creating tomorrow's engineering nightmare.

Overengineering is just technical debt with better documentation.

[Simran Tech @devfrom_hyd]

@ParmarShantun Exactly.

Which one do you think causes more production issues in real applications?

[Simran Tech @devfrom_hyd]

@aminnnn_09 Exactly 😄

Have you seen more security issues caused by weak authentication or weak authorization?

[Simran Tech @devfrom_hyd]

@0xPrajwal_ @NaazShaquiba Good 👍

Ever seen a case where it was implemented wrong and caused issues?