6 ms·
HIBA: Host Identity Based Authorization
- andrewshadura 5y agoIn many Slavic languages (and also in Hungarian) hiba/chiba/chyba means mistake :)
- rad_gruchalski 5y agoIn Polish it means roughly “surely“, alternatively „I guess“.
- mirekrusin 5y ago...or "maybe".
- andrewshadura 5y agoIn modern Polish. The meaning derives from the old Polish word meaning mistake too :)
- rad_gruchalski 5y agoIt doesn’t derive anything. The word had a different meaning before XX century. Modern usage is to weaken the statement, the closest I can immediately think of is „possibly”. On chyba śpi = he possibly sleeps.
- tsimionescu 5y agoIn Romanian, probably through slavic origins, it means specifically 'the flaw'.
- nomoreideas 5y agoIn Hebrew it means affection (written חיבה)
- meitham 5y agoIn Arabic it’s gift, هبة
- coolspot 5y agoIn Russian it means… … it doesn’t mean anything.
- legerdemain 5y agoIf people who speak Slavic languages can drive a car called Škoda, they can use a tool called HIBA.
- jhauris 5y agoThis is definitely interesting. I'd be interested in a functional comparison with ssh using kerberos. Is the difference that each host can be totally independent? Does this project require a separate certificate management system? Perhaps you could use IPA or similar for your everyday machines, and HIBA for rarely accessed computers that you don't want in your domain.
- deleted 5y ago[deleted]
- netman21 5y agoOr you could just implement Host Identity Protocol https://en.wikipedia.org/wiki/Host_Identity_Protocol https://en.wikipedia.org/wiki/Host_Identity_Protocol
- stanleydrew 5y agoI don't see how HIP helps with authorization?
- mitjam 5y agoThis reminds me of a 2016 blog post titled "Scalable and Secure Access with SSH" [1] on the Facebook engineering blog which does this with standard SSH tooling. I think the benefit of HIBA is more granularity in terms of authorization per system via Grants attached to certs as compared to authorized principal files on the hosts. Grants are centrally managed and can be given on a case-by-case basis, and revoked individually, for example. [1]: https://engineering.fb.com/2016/09/12/security/scalable-and-secure-access-with-ssh/ https://engineering.fb.com/2016/09/12/security/scalable-and-...
- staticassertion 5y agoSeems like an open way to get what AWS SSM authnz provides.
- 10x-dev 5y agoI would have named it Secure HIBA, i.e. SHIBA
- pulposus 5y agoBut that's not the SHIBA he knew.