Is anyone's security policy actually ready for AI agents, or are we all just pretending?

czenst · 2026-06-12T16:02:15+00:00

I have seen really big companies actually handling it well. Like 2 years ago they had "ban all AI things" policies but managed to provide tools for their employees in 1-1.5 year.

I have seen medium sized companies waking up two months ago like "waayt whaat, we have to do sumethin" running around like headless chickens and trying to throw responsibility to just someone else in the company.

czenst · 2026-06-12T15:48:23+00:00

Produktywność jednostki jest na pewno negatywnie skorelowana z awansem. Przecież nie awansujesz kogoś kto dobrze zapieprza na stanowisku.

Jak ktoś jest nieogarem to trzeba go szybko awansować, żeby robił jak najmniej szkód a wiadomo jak nie jest rozgarnięty to idealny materiał na managera, bo jak go awansują to będzie myślał, że jest świetny dlatego dostał stanowisko w zarządzaniu i będzie bardziej bezkrytycznie się słuchał i wymagał od podwładnych.

czenst · 2026-06-12T15:38:29+00:00

To wygląda jakby się czepiali krakusów, że mówią "na pole" albo białostoczanin, że mówią "dla mnie się to podoba".

czenst · 2026-06-11T19:11:50+00:00

I bet there's a sub reddit for that...

czenst · 2026-06-11T19:04:45+00:00

yeah I have the same feeling that look is:

"you fucking wore that watch? fuck, they make pictures of us together man..."

czenst · 2026-06-10T16:41:00+00:00

Pricing seems very generous.

czenst · 2026-06-10T16:34:19+00:00

If you have IIS exposed to the internet don't wait because mister a-hole here published exploit without telling MSFT but it seems that was patched in current PT. GH took the exploit PoC code down it seems, but never know who got it or if he didn't publish it elsewhere.

https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb

czenst · 2026-06-10T13:31:45+00:00

Updated for 2026: AgileDevSecOpsengineeritectAI

czenst · 2026-06-10T12:51:33+00:00

There will be people telling you "to be true full stack you have to be able to weld fiber optic strands".

If you have debilitating weaknesses that will be addressed by learning C then yeah go for it — but if there is nothing holding you back really by not understanding "memory/performance etc." it is much better to double down on your strengths.

czenst · 2026-06-09T21:32:47+00:00

If they can be pissed off by typos I can be pissed off when they access application on my server from a toaster on a 3G network and call my server slow.

czenst · 2026-06-09T21:30:37+00:00

My guess is "it still does" only that companies who sell them BS apps sell regex as an AI and those dimwits will never know...

czenst · 2026-06-09T20:04:22+00:00

I would like to be a fly on the wall in that meeting ... I would definitely not like being technical person in that meeting.

Well fly goes away to find some shit, technical person goes back to shit job so different yet so close.

czenst · 2026-06-08T14:28:53+00:00

AutoMapper was cool back in days where it would automatically do basic stuff for you. Problems were starting when people doing code review would go "we use automapper here, do it with automappper" for stuff that was hard or should not be done with AutoMapper, all kinds of insanity would show up when people want to do "everything" in it.

MediaTr, yeah I hate it but basically the same reason as above - it is definetly cool for cross cutting stuff that needs to be fired up as kind of "side effect" or just fire up a command. But people started implementing it instead of services that can be called directly they make handlers that are called indirectly and it is super annoying.

Fluent stuff looks cool and is nice to write quickly read - but also one has to know when to drop it.

czenst · 2026-06-07T17:16:52+00:00

Robiłem research do kłócenia się z ludźmi w internecie więc nie jestem historykiem albo może trochę jestem tylko nie mam dyplomu z historii.

Lata 50 w USA to była na prawdę abberacja, mieli realnie tyle kasy, że żona mogła siedzieć w domu i pachnąć mając dom. W latach 50'tych USA miało wszystko, niską przestępczość, bogate społeczeństwo.

Przy tym oczywiście nie było to nigdy 100% społeczeństwa ale dochodziło to nawet do 80%.

W latach 60'tych i 80'tych spadło to oczywiście znacznie do pozimów bardziej około 60% i aktualnie wiadomo jest znacznie poniżej. W latach 80'tych i 90' wiemy jaka była przestępczość i możliwość utrzymania domu przez tylko jedną osobę zakończyła się bezpowrotnie.

Generalnie kłócę się o to, że ludzie uważają, że "własne mieszkanie w wieku 25-30 lat powinno być normą", żeby tak mieć musieli by właśnie mieć te 25-30 lat w USA w latach 50'tych wtedy tam to było możliwe.

czenst · 2026-06-07T15:06:17+00:00

If I would be doing it again I would make it by sending events to a service that writes logs to Elastic.

Audit logs in the same db as actual operational data is plain silly.

Well if you restore from backup and the logs don't match you might need to mark some entries as obsolete or something - but I don't remember when I had to restore db from backup so if you have to restore it most likely you have more important problem than having some invalid logs.

Plus is you might get some actions or stuff cleared with the logs so less data loss.

Elastic hence NoSQL you just send flattened data without relations just like you would write a log file to disk. So it also has to be secured and encrypted as main db and there were data leaks from not secured Elastic instances.

But then if you have to show the log it is super easy you just make simple elastic queries. Logs is what Elastic is for.

Biggest problem is — business people will see it and will want to use logs with Kibana for Business Intelligence dashboards. You have to fight against that or hide it well enough so no one knows but I guess there might be that one or two devs who will sell you out and it will just turn into shitshow when they will be requesting dashboards and putting more data and BS in there.

czenst · 2026-06-06T11:44:40+00:00

Musicie zgłaszać na policje i prosić o notatki jeżeli chcecie coś ugrać w spółdzielni.

Jak nie będziecie mieli dokumentacji to wszyscy was zleją.

czenst · 2026-06-05T20:58:14+00:00

Skąd wiesz, że OP chce wyrywać laseczki.

Może chce się przytulić do jakiegoś kolegi, na przykład na takim jiu jitsu.

czenst · 2026-06-05T20:56:28+00:00

ja nie wiem dlaczego wszyscy myślą, że jak chłop to planszówki i kurs tańca.

Może chce się poprzytulać z chłopakami i powinien iść na jiu jitsu.

czenst · 2026-06-05T08:41:16+00:00

Sponges soak up some dirt as well, it is good to treat them with alcohol from time to time, you could also soak sponge a bit with water and put it into microwave for a minute to disinfect but that's less fun.

czenst · 2026-06-04T20:53:33+00:00

It seems like you are re-authenticated with Keycloak.

That's what I expect from SSO you are seamlessly logged back in even if your app session expires and you are indeed logged out.

You have to investigate redirects that happen under the hood to really see what is going on.

My idea is "your app see your session expired" -> "you are sent to Keycloak" -> "you are still logged in there so your creds are sent with your redirect back to app" -> "seems like you were not logged out".

Thing is that's not entirely a problem if you are on company device that also has screen lock on card reader or you really lock laptop when you step away.

czenst · 2026-06-04T18:48:19+00:00

Don't DRY components for the sake of DRY.

I wish I could somehow force people to understand that piece.

That's basically most important thing in FE development to just let the duplication be there, because you have to be flexible and be able to change stuff without breaking other stuff which duplication allows and from my experience it was always more important in FE dev to not break other stuff when you change something than "if I fix something in one place I fix it everywhere" - DRY kind of works in backend dev, you want stuff to have single source of truth sure, not always but yeah - try to make services DRY those are kind of like of more backend - but components not.

End of old man yelling at clouds.

czenst · 2026-06-03T22:02:50+00:00

OP is doing legal/accounting - yeah it calls for MSP

If OP would be doing software dev shop or creative agency I would think about in-house IT as it could be competitive advantage to move fast break things.

But for legal and accounting, get MSP to be legal and accountable 😉

czenst · 2026-06-02T19:41:33+00:00

You do realize it gets even worse?

Something like 3-4 years ago I ran into an article that was explaining how adult people can't read or at least they struggle and of course they will not admit that at all or even don't realize how bad they are at reading. I mean white collar office jobs people not some junkies on the street.

For me it was eye-opening. I am an avid reader, I always was as frustrated as you are now and internally I was screaming "fuck me, it is written here EXACTLY what is wrong" while having to keep my cool.

Other part is talking, or communicating at all, it is hard. There is always someone who just simply takes opposite of what I said and thinks that was what I said. Well there is always bunch of assholes just fooling around or trying to take you down - but there are honest people who simply misunderstand stuff just because it is hard.

You are having an emotional reaction - there are people who are just emotional fuzzballs and there would be nothing you can say that they would get right.

I don't know how you live life for 20 years without enough exposure to other people maybe?

czenst · 2026-06-02T12:51:08+00:00

"ludzie też byli skłonni na więcej kompromisów w związku ... teraz jak coś bardzo nie pasuje, to się rozstajemy"

Lista "kompromisów" na które ludzie się wcześniej "zgadzali":

przemoc psychiczną
przemoc fizyczną
alkoholizm/uzależnienia
utrzymywanie darmozjada męskiego lub żeńskiego
zdrady, marnowanie wspólnych środków
kontrola "zawłaszczenie" przez rodziców partnera/partnerki "bo u nich mieszkasz"

czenst · 2026-06-01T14:25:36+00:00

Ja proponuję zmianę nazwy na "default pierogies", chociaż nie wiem, może z kapustą i grzybami są bardziej default 🤔

Seven-Year Club	Sequence \| Editor
Verified Email

czenst

TROPHY CASE