Explore

Tagged #auth

All AI & Prompt Engineering324 Engineering176 Data & Analytics89 Product4 Design28 Sales2 Marketing4 Finance24 Strategy31 Operations4 Customer Success3 People & Recruiting4 Security & Compliance8 Legal2 Other Professional1

#authClear filters

Mina Cruz@minacruz·4w ago

How I ask for help with a boring auth review

I kept the useful constraints and dropped the role-play. It works better when the missing details are stated plainly.

Mina Cruz

Be blunt about my plan for a boring auth review. I am going to collect everything, ask for a polished answer, and fix details later. What is likely to go wrong?

Claudeclaude-opus-4.5

Three things. - “Everything” has no boundary, so weak inputs and strong inputs will be treated alike. - A polished answer can hide missing evidence. Ask for gaps and assumptions before prose. - “Fix details later” means there is no acceptance test now. A safer sequence is: define the decision, choose the minimum trusted inputs, make an ugly first pass, check it, then polish. For this task, keep the patch smaller than the diagnosis.

Show all 3 messages

3402.9k

Mina Cruz@minacruz·2mo ago

What finally made a boring auth review click for me

I wanted help with a boring auth review without pretending the model knew facts I had not provided.

Mina Cruz

Help me trace an authentication flow for privilege gaps, stale sessions, and unsafe defaults. Context: - Goal: [what a good result lets me do] - Current situation: [paste notes, draft, data, or constraints] - Audience: [who will use the result] - Deadline or limit: [time, budget, tools, length] Before answering, ask up to three questions only if the answers would materially change your recommendat

Geminigemini-2.5-pro

This is usable as written. The important parts are the definition of done, the instruction to expose assumptions, and the request for a smallest test. For a boring auth review, I would start with these checks: - Reproduce the failure before changing code - Keep the patch smaller than the diagnosis - Write the rollback before deployment If you share real material, remove anything private first and replace bracketed fields with concrete details.

Show all 3 messages

3402.8k

Mina Cruz@minacruz·2mo ago

Gemini found the hole in my a boring auth review plan

Not magic wording, just enough context and a clear definition of done. Easy to adapt.

Mina Cruz

For a boring auth review, should I build a complete plan first or test one small slice? I have limited time and I do not want throwaway work.

Geminigemini-2.5-pro

Test one slice, but choose a slice that crosses the riskiest part of the problem. A tiny easy demo will only prove the easy part. Use this decision rule: - If reversing the choice is cheap, try it. - If the choice locks in data, money, or other people’s time, write the full decision first. - If uncertainty is concentrated in one step, test that step before planning around it. For a boring auth review, make the first test produce evidence you can compare, not just something that looks complete.

Show all 3 messages

3301.5k

Mina Cruz@minacruz·3mo ago

My notes from fixing a boring auth review

The first answers were broad enough to be useless. This version asks for assumptions, evidence, and a next step.

Mina Cruz

I am stuck on a boring auth review. I need to trace an authentication flow for privilege gaps, stale sessions, and unsafe defaults, but my current attempt is getting vague and too big. What would you check first?

ChatGPTgpt-5

First, shrink the decision. Do not solve the whole subject at once. 1. Reproduce the failure before changing code. 2. Keep the patch smaller than the diagnosis. 3. Write the rollback before deployment. Write down the result you need by the end of this session. Then choose one input you trust and make a first pass that can be checked. If that pass fails, you will know which assumption to revisit instead of starting over.

Show all 3 messages

3301.4k

Mina Cruz@minacruz·3mo ago

A blunt review of my approach to a boring auth review

I wanted help with a boring auth review without pretending the model knew facts I had not provided.

Mina Cruz

Give me a short checklist for a boring auth review. I want something I can run before I call the work done.

ChatGPTgpt-5

Use this pass: - [ ] The goal is one sentence and names the user or decision - [ ] Inputs are current, relevant, and traceable - [ ] Assumptions are visible - [ ] Reproduce the failure before changing code - [ ] Keep the patch smaller than the diagnosis - [ ] Write the rollback before deployment - [ ] One failure case has been tested - [ ] The next owner and next action are clear If you cannot check an item, mark it unknown. Do not quietly treat unknown as done.

Show all 3 messages

3401.5k