jzelinskie

8 ms·

31.
by jzelinskie 1y ago
Just wanted to say thanks for such a good write-up and the great work on Otter over the years. We've used Ristretto since the beginning of building SpiceDB and have been watching a lot of the progress in this space over time. We'v
32.
by jzelinskie 1y ago
Another good comparison would be against https://pkg.go.dev/github.com/puzpuzpuz/xsync/v3#Map
33.
by jzelinskie 1y ago
I recommend folks check out the linked paper -- it's discussing more than just confidentiality tests as a benchmark for being ready for B2B AI usage. But when it comes to confidentiality, having fine-grained authorization securing your
34.
by jzelinskie 1y ago
Container runs OCI (docker) compatible by creating lightweight VMs. This repository houses the command-line interface which is powered by containerization[0], the Swift framework wrapping Virtualization.framework to implement an OCI runtime
35.
Container: Apple's Linux-Container Runtime(github.com)
305 points by jzelinskie 1y ago|44 comments
36.
by jzelinskie 1y ago
The screenshot in TFA pretty clearly shows docker-like workflows pulling images, showing tags and digests and running what looks to be the official Docker library version of Postgres.
37.
by jzelinskie 1y ago
The Brooklyn Public Library in Green Point has a tool library, although it isn't very large if that's close to you at all. I'm not sure if it's available at any other library locations but the one in Green Point is fairl
38.
by jzelinskie 1y ago
No commentary on your latter points about Oxide's compensation structure, but I fundamentally don't share the same sentiment you have about the dynamics of cash flow for venture-backed startups. Maybe there are still VC-backed com
39.
by jzelinskie 2y ago
Thanks for the response. In my opinion, oso does the best of job of any policy engine at prescribing how input data to their system is fed (and your linked blog demonstrates it well!). I do think you might have pivoted the conversation, tho
40.
by jzelinskie 2y ago
A separate policy language is explicitly useful for those that want to be able to reuse policies in programs written in different languages. It's a part of the best practice (for larger orgs/products) for decoupling authorization
41.
by jzelinskie 2y ago
This project looks like a very nice lightweight way to implement policy in a Rust application; I really like the ergonomics of the builder. Despite being very different systems, the core permissions check being the same signature as a call
42.
by jzelinskie 2y ago
AuthZed (W21) | Multiple Roles | Remote | Full-time | $150-270k AuthZed Cloud is fully-managed, database-as-a-service platform built to be the foundation for authorization across product suites and oceans. At the core of AuthZed Cloud is Sp
43.
by jzelinskie 2y ago
Is buf-list[0] what you're describing? [0]: https://crates.io/crates/buf-list
44.
by jzelinskie 2y ago
"Auth" is also super overloaded. OP is an authentication or AuthN tool which is not the same nor does it encompass authorization or AuthZ. I'm partial to using the terms "identity" and "permissions" instea
45.
by jzelinskie 2y ago
I think the next closest thing for CRDs is this: https://doc.crds.dev
46.
by jzelinskie 2y ago
This is a great comparison and a great step towards pressure to improve cloud service pricing. The magic that moves the region sounds like a dealbreaker for any use cases that aren't public, internet-facing. I use $CLOUD_PROVIDER becau
47.
An open source app we can all learn from(youtube.com)
2 points by jzelinskie 2y ago|0 comments
48.
by jzelinskie 2y ago
Thank you! That really means a lot! >It's subtle but I also get the impression most gRPC stubs are miserably bad, that Authzed had to go long and far to get away from a lot of gRPC tarpits. They aren't terrible, but they also a
49.
Benjamin Franklin broke our CI(authzed.com)
1 points by jzelinskie 2y ago|0 comments
50.
by jzelinskie 2y ago
ClearSky does this: https://clearsky.app/jimmy.zelinskie.com/lists
51.
by jzelinskie 2y ago
What was the motivation between implementing BBQVec in Rust and Go? Which is more mature? Can they share e2e test suites?
52.
by jzelinskie 2y ago
If you are a CloudFlare employee reading this, you should get involved with the OCI Distribution group that develops the standards for the registry: https://github.com/opencontainers/distribution-spec
53.
by jzelinskie 2y ago
What are some real world apps using CRDTs that have really good experiences? IIRC Notion was supposed to be one of them but realistically taking notes with two people in Notion is almost unusable compared to Google Docs.
54.
by jzelinskie 2y ago
This is a fantastic post that explains a lot of the end product, but I'd love to hear more about the journey specifically on denormalizing permissions at Notion. Scaling out authorization logic like this is actually very under-document
55.
by jzelinskie 2y ago
I think this is a really good question because it highlights the differences between now and the ZIRP-era of startups. Previously, you'd see a ton of companies able to raise massive amounts of capital and be left wondering how they cou
56.
AuthZed, creators of SpiceDB, raises $12M Series A(siliconangle.com)
1 points by jzelinskie 2y ago|0 comments
57.
by jzelinskie 2y ago
This is a fairly sane place to be in terms of bang for your buck. It's easy to find yourself in a place where authorization data and logic span multiple services and at that point having everything deeply siloed into Postgres might be
58.
Intel Continues Prepping the Linux Kernel for X86S(phoronix.com)
15 points by jzelinskie 3y ago|5 comments
59.
by jzelinskie 3y ago
If you're looking for the answer to this question the "relation graph" from AniDB is probably the best thing around: https://anidb.net/anime/715/relation/graph
60.
by jzelinskie 3y ago
Sure thing! These terms may not be the best way to communicate these concepts. Would love your take on that, too. I used the term decentralized to describe claim-based token-passing authorization strategies because the data defining their a

More ›