ogazitt

12 ms·

61.
by ogazitt 5y ago
You're right that the control plane currently is not OSS. Most people we talked to when we first embarked on the journey said that it was critical for the authorizer to run locally (and be OSS), but they preferred to not have to opera
62.
by ogazitt 5y ago
Aserto is based on a few open source projects: OPA [1], policy CLI [2], and Open Policy Registry [3]. Architecturally, the Aserto authorizer is packaged up as a docker container and deployed as a sidecar or microservice in a customer enviro
63.
by ogazitt 5y ago
Hi, this is Omri, co-founder of Aserto. Your comment is spot on - that's exactly what we've found. Authorization needs to be deployed right next to the application - no one is going to take a dependency on a SaaS developer API tha
64.
by ogazitt 5y ago
Auth0 is a great developer API for authentication, and Aserto picks up where Auth0 leaves off. The "contract" between the authentication system (Auth0) and the authorization system (Aserto) is a signed JWT. You can get away with v
65.
by ogazitt 5y ago
Thanks Brad! We're big fans of both Auth0 and OPA.
66.
by ogazitt 5y ago
OPCR uses Dex [1] for its IDP, and federates with github through an OAuth2 flow. We only ask for public github information. [1] https://github.com/dexidp/dex
67.
by ogazitt 5y ago
This is a great tool - using it successfully to package up OPA policies for Aserto.
68.
by ogazitt 5y ago
The last paragraph is especially salient. To me, ZT is really about recognizing that perimeter security is dead, and a modern approach to authorization requires defense-in-depth. A zero trust access proxy is just one layer (and is inherentl
69.
by ogazitt 5y ago
Definitely in the backlog :)
70.
by ogazitt 5y ago
Yeah, check out [1] for a sample project that uses github actions to login, build, and push images. [1] https://github.com/opcr-io/policy-action-sample
71.
by ogazitt 5y ago
When we first started using OPA [1], we were impressed with how flexible it is as a general-purpose decision engine. One thing we missed, though, is the ability to interact with policy bundles in the same way that we interact with docker im
72.
Show HN: Open Policy Registry: a Docker-inspired workflow for OPA policies(openpolicyregistry.io)
26 points by ogazitt 5y ago|12 comments
73.
by ogazitt 5y ago
When this came out, I spent a couple of hours positioning frogs. I think I even learned some CSS. It's as addictive as Wordle :)
74.
by ogazitt 5y ago
Automating the generation of API docs from schema (swagger / openapi) seems as important as any GitOps practice in 2022. At Aserto, we use the readme.com github actions to automatically update our API docs (aserto.readme.io) any time a
75.
by ogazitt 5y ago
The Open Policy Agent has been able to compile Rego policies into executable Wasm modules [0] for a couple of years, with some nice performance benefits [1]. [0] https://www.openpolicyagent.org/docs/latest/wasm&#x2
76.
by ogazitt 5y ago
Console sales have always been a break-even business over the lifetime of the generation. You lose LOTS of money up front, and eventually (in year 6 or 7) you may turn an overall profit on console sales. Hardware accessories (e.g. controlle
77.
by ogazitt 5y ago
Seems like the HTTP/2 protocol has been baked for so long, that whatever new methods are added, adoption will be very slow and only a small fraction of web APIs will expose those methods. In other words, aside from <1% of developers
78.
by ogazitt 5y ago
Google already knows everything about you. Now they get to limit how much others know about you, under the rallying cry of "preserving user privacy". They get to decide how much of your profile they disclose to advertisers. It see
79.
by ogazitt 5y ago
Nice! The download was painless, the memory footprint seems to be lower than VSCode. The set of extensions is really nice for 18 months of work since the original launch. When will there be a Rego extension? (Rego is the OPA policy language
80.
by ogazitt 5y ago
Very cool visualization, but the underlying dataset is very Euro-centric.
81.
by ogazitt 5y ago
> ...Garg described one of his investors as “sewage.” And yet the board re-instated him. Nice.
82.
by ogazitt 5y ago
So frustrating. Backup is like an insurance policy - your only interaction with the product is the "front-end" (e.g. "how easy is it to configure and buy what I need"), as opposed to what you're really paying for (t
83.
by ogazitt 5y ago
Seems almost exactly like Google Cloud Run [0], which has been available in production since 2019. Is there anything novel in this offering that I've missed? [0] https://cloud.google.com/run
84.
by ogazitt 5y ago
How does it compare to Hololens? How does it compare to Oculus Rift? One thing I wonder about is whether VR hardware will evolve like mobile hardware did back in 2005-2006. In 2004, Microsoft and RIM were the leaders in the emerging “smartp
85.
by ogazitt 5y ago
Love this... thanks for the feature request, and the tip that it's live!
86.
by ogazitt 5y ago
These power numbers are impressive. The memory bandwidth is also impressive. But one thing to watch for - just because the memory bandwidth is so good, don't skimp on memory. The original M1 reviews in Feb 2021 convinced me to get an M
87.
by ogazitt 5y ago
Sweet! Great to see an OSS alternative to Segment.
88.
by ogazitt 5y ago
> If you're a company doing B2B sales, how often do prospective customers ask about the certificate? We're an authorization API company, so we may not be representative, but it definitely comes up, even in the context of early-
89.
by ogazitt 5y ago
Every few years, some version of this article comes out. The version of 30 years ago lamented how programmers don't really understand the hardware anymore because a compiler abstracts the machine. 20 years ago, it was about how virtual
90.
by ogazitt 5y ago
Why is it that MacOS feels more and more like Windows did 10 years ago? Slower, bloatier, buggier. In 2015, I used to go months between reboots on my MacBook Pro. In 2021, I seem to have to reboot my M1 mini at least once a week.

More ›