andychiare

5 ms·

1.
by andychiare 8d ago
Authorization has always been the primary question; authentication is simply an ancillary question to help answer it.
2.
by andychiare 12d ago
We are in the context of "who verifies the verifier?" :-)
3.
by andychiare 12d ago
Thanks!
4.
by andychiare 12d ago
Just to clarify, it's not about a new standard, folks. It's about giving things names to avoid confusion and mixing up different things.
5.
Authorization terminology is a mess: Let's fix it(idpro.org)
120 points by andychiare 16d ago|87 comments
6.
by andychiare 2mo ago
The "rule cluster" recalls symbolic AI, the old-good fashioned AI of the past century. While that approach wasn't as successful as the new GenAI, combining the two could be beneficial
7.
Everybody Wants to Be a Dev(theturingmachine.net)
2 points by andychiare 2mo ago|0 comments
8.
by andychiare 3mo ago
JWTs were never designed for session management. Their primary purpose is to transfer information whose origin can be verified. Period. The idea that they are related to sessions is, unfortunately, a very common misconception. I wrote an ar
9.
by andychiare 3mo ago
It's been a general trend for a couple of years now for any website. AI uses content to provide answers to users. This doesn't mean your content is no longer valuable. It just means that you no longer receive direct feedback on ho
10.
by andychiare 3mo ago
Great read! Queueing theory is fascinating. In a sense, it's an attempt to control uncertainty, but it's not always easy. For example, choosing the right queue is still a hard problem :-) Watch this video: https://www.y
11.
by andychiare 4mo ago
It's not just gestures that are adapted; words are too. In the parts of Italy where I was born and raised, for example, adults used to adapt words to make them easier for children to pronounce. However, this practice has recently been
12.
by andychiare 4mo ago
Boolean logic/black-and-white thinking is convenient for simple processing. But the world isn't simple. If you just consider time, there are statements whose truth you can't determine: "It will rain tomorrow" (BTW,
13.
by andychiare 4mo ago
> “AI everywhere” is not the goal. Useful software is the goal. Great observation! Often the excitement of novelty makes us lose sight of the real goal
14.
AI Agents Have Two Souls. You Only Control One(auth0.com)
1 points by andychiare 4mo ago|0 comments
15.
Federated Identity vs. Single Sign-On: Key Differences(auth0.com)
2 points by andychiare 7mo ago|0 comments
16.
Duck Intelligence(theturingmachine.net)
1 points by andychiare 7mo ago|0 comments
17.
by andychiare 8mo ago
I love Borges and his lucid hallucinations. As this story highlights, when a representation of reality (the map) ends up mapping reality one by one, the representation becomes useless. I see this as a warning for the progress of AI. When AI
18.
Why Broken Access Control Still Dominates the OWASP Top in 2026?(auth0.com)
2 points by andychiare 8mo ago|0 comments
19.
by andychiare 8mo ago
> It is not possible to accurately estimate software work. An "accurate estimation" is an oxymoron. By definition, an estimate is imprecise. It only serves to provide an idea of the order of magnitude of something: will this wo