ogazitt

11 ms·

91.
by ogazitt 5y ago
This is pretty sweet! I always have to look up jq docs if I want to do anything complex, but your pipe model seems more intuitive. Also, I love that there's both a library and a CLI.
92.
by ogazitt 5y ago
Maybe I'm old-school, but the most impactful books for me: * Operating Systems Concepts: Silberschatz et al * Compilers: Aho, Sethi, Ullman ("the dragon book") * Transaction Processing: Jim Gray * Applied Cryptography: Bruce
93.
by ogazitt 5y ago
Seems like a cool idea, but I had the same reaction. The CTA is "sign up for updates". Or if you follow the funding trail to edf.org, the CTA is "Donate". Which honestly was not all that well-done.
94.
by ogazitt 5y ago
Great article, thanks for sharing! We completely share your point of view that authorization is (at least) as interesting as moving to k8s :) Disclaimer: I'm a co-founder of Aserto, a developer API for authorization. I particularly lik
95.
by ogazitt 5y ago
LOL :) XACML had some great ideas (my team worked on it back in 2004-2005), but god, all those angle brackets <shudder/>
96.
by ogazitt 5y ago
OPA is a decision engine, and a great underpinning for an application authorization solution for developers. We're using it in Aserto (www.aserto.com).
97.
by ogazitt 5y ago
Thanks - we agree! :) (I'm one of the Aserto co-founders). It's indeed a hard problem, because you want the solution to have the operational characteristics of a library (millisecond latency / 100% available to the calling ap
98.
by ogazitt 5y ago
The ideas (attribute based access control) have stood the test of time, but the spec is archaic, and there are relatively few implementations. You can achieve alot of what XACML was intended for with a general-purpose policy engine (OPA).
99.
by ogazitt 5y ago
Exactly. When you cross a certain complexity threshold, it's worth separating concerns. It's true for configuration, it's true for IaC, and also for authorization policy.
100.
by ogazitt 6y ago
All developer authorization solutions should follow the Five Principles. Agree?
101.
by ogazitt 6y ago
Congrats on launching - looks awesome! It's about time we have an open source datadog :) Also, it's great to see the early focus on developer experience - "opstrace create".