Cods Plaice: Staying safe on the Web - what can I do to make my browsing safer codsplaice.blogspot.com/2019…

Australia has entered the chat.

Never check a role name in your code In one of the projects where I worked, we had role checks in many places across the project. Then, we needed to introduce a new role and that was a cumbersome code change in many places. RBAC stands for Role-Based Access Control. The path we selected was to give users roles and let the code ask "is this user a Manager?" Yet, the model has one more part. Users get roles, roles get permissions and permissions define what a user can do. The code should only ask about the permission, for example "can this user approve an invoice?" Here is the complete flow: 𝟭. 𝗧𝗵𝗲 𝘁𝗼𝗸𝗲𝗻 𝗰𝗮𝗿𝗿𝗶𝗲𝘀 𝗿𝗼𝗹𝗲𝘀. We set up the identity provider to add them at sign-in. 𝟮. 𝗧𝗵𝗲 𝗔𝗣𝗜 𝘁𝘂𝗿𝗻𝘀 𝗿𝗼𝗹𝗲𝘀 𝗶𝗻𝘁𝗼 𝗽𝗲𝗿𝗺𝗶𝘀𝘀𝗶𝗼𝗻𝘀. It reads the mapping from its database and keeps a short cache. 𝟯. 𝗧𝗵𝗲 𝗲𝗻𝗱𝗽𝗼𝗶𝗻𝘁 𝗰𝗵𝗲𝗰𝗸𝘀 𝗼𝗻𝗲 𝗽𝗲𝗿𝗺𝗶𝘀𝘀𝗶𝗼𝗻. It asks for invoices:approve and never names a role. 𝟰. 𝗔𝗻 𝗮𝗱𝗺𝗶𝗻 𝗮𝗱𝗱𝘀 𝗮 𝗻𝗲𝘄 𝗿𝗼𝗹𝗲 𝗮𝘀 𝗱𝗮𝘁𝗮. The admin creates the Auditor role in the identity provider. One table row maps it to invoices:read. The code stays the same, and nothing gets deployed. In ASP.NET Core, the endpoint gets [Authorize(Policy = "invoices:approve")]. It replaces [Authorize(Roles = "Manager")]. Behind it, a policy provider turns that name into a requirement. A handler checks it against the user's permissions.

Natalie is at it again - but it can't be Trump, he's got the Bible the right way up, & his ankles aren't swollen.✝️⛔️

Reform - dragging you backwards through time........

tenMinutesWasEnough

"I'm doing a (free) operating system (just a hobby, won't be big and professional like gnu)..." On August 25, 1991, a 21-year-old student sent a message to a Usenet newsgroup. He thought he was just building something fun for himself. 35 years later, that "hobby" is the backbone of global technology: 🚀 Powering helicopters in space with NASA ☁️ Running the global cloud and 100% of the world’s supercomputers 📱 Connecting billions of people 🎮 Redefining the future of handheld gaming What started as one student's side project became the greatest collaborative technology movement in history. Thank you to every maintainer, contributor, and advocate who made it possible. Happy 35th Birthday, Linux. Here’s to the power of open source and the next 35 years of building together. learnlinux.ie/content/linus-… #Linux35

Tuscany Italy 🇮🇹🙏🏼

😂

😂

An American interviewer asked me about my political beliefs. #VoteBinface

“I’ve been selected to stand as a Conservative councillor in Somerset.”

🤔

I don’t know what is going on here but it looks like I am trying to break up a fight!! Interview with @countbinface out soon. Meanwhile new @restispolitics Q&A out now - India protests, Saudi nukes, AI date centres, Trump bonkers speech to White House correspondents dinner &more

RT @peterjukes: I think a lot of people have missed this. Until the police investigation in February last year, Reform UK’s financial struc…

My #Top1000 #NAFO Accounts for 29th July 2026 376. @CarstenWB* (Down) #NAFO SydesJokes.blogspot.com/2026… 377. @jflucke* (Down) #NAFO SydesJokes.blogspot.com/2026… 378. @NikolajMeedom* (Down) #NAFO SydesJokes.blogspot.com/2026… 379. @FellaBoston* (Down) #NAFO SydesJokes.blogspot.com/2026… 380. @ChevroletCChase* (Down) #NAFO SydesJokes.blogspot.com/2026… 381. @GrootCorine* (Down) #NAFO SydesJokes.blogspot.com/2026… 382. @earphorny* (Up) #NAFO SydesJokes.blogspot.com/2026… 383. @Dmjhest* (Down) #NAFO SydesJokes.blogspot.com/2026… 384. @pawpgandist* (Down) #NAFO SydesJokes.blogspot.com/2026… 385. @DennisG_ol* (Down) #NAFO SydesJokes.blogspot.com/2026… 386. @ConstancePeck9* (Down) #NAFO SydesJokes.blogspot.com/2026… 387. @Hlava22* (Down) #NAFO SydesJokes.blogspot.com/2026… 388. @Satan_the_8th* (Down) #NAFO SydesJokes.blogspot.com/2026… 389. @tezbar* (Down) #NAFO SydesJokes.blogspot.com/2026… 390. @AndriyZhurba* (Down) #NAFO SydesJokes.blogspot.com/2026… 391. @PhoenixRebornUA* (Down) #NAFO SydesJokes.blogspot.com/2026… 392. @manu100por100* (Down) #NAFO SydesJokes.blogspot.com/2026… 393. @SweetieCanuck* (Down) #NAFO SydesJokes.blogspot.com/2026… 394. @SassyFellina* (Down) #NAFO SydesJokes.blogspot.com/2026… 395. @genaudas1* (Down) #NAFO SydesJokes.blogspot.com/2026… 396. @jc_van_d* (Down) #Smokefleet SydesJokes.blogspot.com/2026… 397. @VanCrystl* (Down) #NAFO SydesJokes.blogspot.com/2026… 398. @OrugaNafo* (Down) #NAFO SydesJokes.blogspot.com/2026… 399. @MorganV2468* (Down) #NAFO SydesJokes.blogspot.com/2026… 400. @Kappa2316* (Down) #NAFO SydesJokes.blogspot.com/2026… #NAFO #Smokefleet #SupportUkraine @u24_gov_ua x.com/SydesJokes/status/2054…

Recently I've flipped from being bullish to being bearish about AI. I think I'm updating my bearishness to be more solidly bearish. Early thoughts (which I hope to be disproven in the next year or so, I would prefer progress) and my reasoning: The whole 'it turns out if you keep training and scaling the models more they develop broad new capabilities in lots of domains' thesis is wrong (sorry Demis). The recent batch of models haven't got more general, they've got less general. This is most obvious in the fact that their language outputs have got much worse in comparison to e.g. o3. If they were gaining generalist capacities we would expect them to be describing their work in ever more graceful and comprehensive prose! The image that was being shared as the AGI thesis (November 2025, Tomas Pueyo) was the spiky bubble that has a current spike or two out past human capabilities (e.g. on coding or math) but below human on other capabilities on the other spikes - the future prediction was that as the models scale/advance, every spike would grow bit by bit until the whole center encompasses the human capabilities, with super-superhuman on some spikes. I think it seems like what's actually happened in the last few models has been that the coding/math spike has grown, but leaving behind or even at the cost of the other spikes. The models are no better at some simple logic, language (and sometimes worse!). This makes sense from a simple RL perspective; you can't RL something endlessly on one domain of tasks and expect it to improve on the other tasks. The fact that early LLMs did seem to improve generally was a byproduct of the written language corpus covering everything - that corpus is general, so training it on that gave the appearance of something generally intelligent and becoming more generally intelligent as it got better at replicating that corpus. But the actual logic and underlying ground truths behind the language aren't captured efficiently enough and weren't effectively RLd in - they top out at some point (I guess this happened around the time that there was the 'has scaling hit a wall' discussion in late 2024). Chain of thought was then a genuine breakthrough, along with web search, which plugged into that general LLM global-corpus intelligence to lead to post 2024 gains. The AI companies have since worked out that coding works (and pays) really well (basically this is because the entire job is nearly perfectly recorded and exists as training data, and you can set up clear benchmarks and rewards). The recent models (and benchmarks) have been maxxing that and we've seen degradation on normal English use for that reason. This could still be transformative, leading to extremely powerful (and potentially dangerous, particularly in cyber security) models but it's not a pathway to AGI. I'm probably at about 40% confidence about this. It fits my current observations of AI progress and has a basic explanatory model. It doesn't account for potential breakthroughs, which is a major reason for discounting. To make some predictions, I guess if I'm right this will become broadly apparent and more widely acknowledged in the next year or two, as we see how the spikiness of models that keep getting released develops. Maybe there will be efforts to concentrate on specific spikes e.g. health or law which require going back to earlier models and RLing on a different data set/with different rewards/benchmarks. Maybe those separate models can be linked together to give a more apparently general model. How capital intensive that is/the potential profitability will be a defining question. But I just don't see general abilities emerging atm, and I don't think we will any time soon. Good news - a whole industry of tackling important specific problems/sectors can open up!

내가 자연에 대해 얼마나 모르고 있었는지 이 영상 보고 깨달음

🚨 BREAKING Spain breaks diplomatic ties with Israel. Madrid has just recalled its ambassador and is planning to close its embassy in Tel Aviv. Israel condemned the move, calling it "highly antisemitic."