jzelinskie

11 ms·

91.
by jzelinskie 3y ago
Whatever happened to scalene?
92.
by jzelinskie 3y ago
Ah, a shared solution to this problem is sorely needed in the Python ecosystem. When we developed the Quay[0] container registry, we had a bunch of gunicorn processes all with their own Prometheus client registries (the in-memory data struc
93.
by jzelinskie 3y ago
I might be misunderstanding your post, but CockroachDB is an OSS solution for global SpiceDB storage that we recommend for cross-cloud or global deployments outside of GCP. The team at GitHub actually contributed MySQL support as they use
94.
by jzelinskie 3y ago
>In other words: start with ReBAC and add the ABAC bits you want. I.e., cross the two schemes. This is the approach by SpiceDB as mentioned in the article: https://authzed.com/blog/caveats
95.
by jzelinskie 3y ago
Many of the optimizations used when traversing the graph for SpiceDB are inspired by research in the various dialects of Datalog. At the end of the day, there are very few operations that authorization systems need and it makes more sense t
96.
by jzelinskie 3y ago
Disclosure: I'm a cofounder of Authzed and one of the creators of SpiceDB, the primary strawman for graph-based authorization used in this article. I don't believe that any of the data being represented in this article is ubiquito
97.
by jzelinskie 3y ago
I would love to see non-trivial examples of using the nix toolchain to build images with multiple OS, architectures, SBOMs. As someone unfamiliar with the nix ecosystem, it seems like a tough ask for contributors to require nix knowledge ra
98.
by jzelinskie 3y ago
Things I can't live without in a new Go project in no particular order: - https://github.com/golangci/golangci-lint - meta-linter - https://goreleaser.com - automate release workflows - https:/&#
99.
by jzelinskie 3y ago
Happy to see someone beat us to the punch for posting this to HN! Hi everyone! I'm one of the founders of SpiceDB & AuthZed. We're proud to have worked alongside Netflix to ship such a huge landmark authorization; together, we
100.
Ask HN: Do you use a cloud dev environment?
8 points by jzelinskie 3y ago|7 comments
101.
by jzelinskie 3y ago
CIAM is not nearly as popular of a term as it needs to be. When most developers build apps today, they still look at their cloud provider's IAM or Active Directory for inspiration in design of their customer-facing systems. I think th
102.
by jzelinskie 3y ago
Congratulations on the OSS launch! Was it always in the cards to open source Cedar? I'm excited to see you've found a way to bring verification that exists in non-policy-based authorization solutions to Cedar. Was that functionali
103.
by jzelinskie 3y ago
Here's a recording from '95 entitled the same: https://www.youtube.com/watch?v=a1zDuOPkMSw I also highly recommend reading the Stripe Press book also with the same name: https://www.amazon.com/dp&#
104.
Pitfalls of JWT Authorization(authzed.com)
6 points by jzelinskie 4y ago|0 comments
105.
by jzelinskie 4y ago
I don't think that their choice to keep their server software proprietary is baffling. They're going to architect it so that it's easiest/best for their team to run which is not the same what's easiest/best for
106.
by jzelinskie 4y ago
Well, you're in luck because AuthZed, the business behind SpiceDB, has a fantastic track record in this regard. We're quite conservative with fundraising and the first year of the company was bootstrapped by the founders. The foun
107.
by jzelinskie 4y ago
If you need the flexibility of a system that can model both RBAC and ABAC and you also want you want a Zanzibar-inspired design, SpiceDB[0] is the only option that I know checks all the boxes (disclosure: I'm a maintainer). The UX defi
108.
by jzelinskie 4y ago
Congrats on the launch! Your GitHub Project board looks nice and clean. Do you have any posts or code for how your bot is managing issues there?
109.
by jzelinskie 4y ago
I think starting with books will help provide context and "the big picture" before jumping into the foundational papers. Lots of folks recommend mixu's book: http://book.mixu.net/distsys/single-page.html
110.
by jzelinskie 4y ago
The last discussion point from this article very much so rings true for me, too. It's been how many years since the Spanner paper and I still can't get a GCP VM with atomic clocks? At least now I can provision Cloud Spanner as a m
111.
by jzelinskie 4y ago
I'd strongly disagree with the author that permissions are always long-lived -- modern authorization can also be ephemeral, dependent on run-time context[0], and just as fine-grained as feature-flags. Full disclosure, I think about thi
112.
by jzelinskie 4y ago
Will FEX ever leverage the hardware that Apple design for Rosetta 2 trickery? It seems like a heavy lift for a general purpose emulator, but at the same time there's probably a bunch of performance wins to be had.
113.
by jzelinskie 4y ago
We used the "WITH RECURSIVE" basically the moment it shipped in Postgres for the original CoreOS Clair[0] data model which was a graph of software versions and vulnerabilities. It scaled well compared to a naive graph abstraction
114.
by jzelinskie 4y ago
Since Go got generics, working with the Kubernetes API could become far more ergonomic. It's been pulling teeth until now. I'm eager to see how the upstream APIs change over time. In the mean time, one of the creators of the Opera
115.
by jzelinskie 4y ago
I think folks might be over-estimating the difference between the Helix and vim. IME, adding "ge" to Vimium[0] was good enough to avoid any conflicting muscle-memory. I think many folks configuring their vimrc are deviating equall
116.
by jzelinskie 4y ago
Correct. If you've got no background in vim, it might be a good thing Helix has broken "backwards compatibility" in order to have more cohesive key-bindings.
117.
by jzelinskie 4y ago
I'd honestly point folks towards Helix[0] these days if they don't already have something keeping them on neovim/vim. There's very little in the ways of needing to configure Helix; it has built-in most functionality that
118.
by jzelinskie 4y ago
This is really cool -- congrats on the launch! Similarly, the team over at AuthZed has created a playground for SpiceDB[0], by using WebAssembly and Monaco. We debated for hours whether or not to go the notebook route. I'm sure y'
119.
by jzelinskie 4y ago
Does anyone have the motivation for why the git project wants to use their own implementation of gzip? Did this implementation already exist and was being used for something else? I understand wanting fewer dependencies, but gut-reaction is
120.
by jzelinskie 4y ago
My team recently built NextJS-based site with sets of annotations on the research paper our project is based on (Google Zanzibar): https://authzed.com/zanzibar https://github.com/authzed/zanzibar-annota

More ›