Viewing profile — andyroid

“we all would like corporations to share their products with us, but forcing us to pay because of their proprietary license is extremely anti-freedom to me” No one is forcing you t…

As have Anthropic and OpenAI.

> We replaced all the commercial products our clients and ourselves used with our own You’ll never guess what product your clients are looking to replace with their own next.

You’re not wrong, but what an IDE does when opening a project directory is an issue with that tool, and not one directly addressable by the maintainers of the dependency management…

Free as in being trapped in Russia for life.

> never heard anyone suggest the best sports teams should stop competing when they've won enough, or that the best inventors should stop, or the best artists While they want you to…

Does a hair transplant really count as a cure though? It’s more akin to a pricey baseball cap.

Not sure why that matters, but OpenFGA is an implementation of Zanzibar, which isn't exactly new. There are many similar implementations to choose from should one want to model aut…

Bundle servers provide a centralized "data plane" decoupled from the distributed component (OPA). You don't need to rebuild your policy any time data changes. Just push a new bundl…

Where a company is founded is irrelevant with regards to the GDPR. If they have users in the EU, GDPR applies.

Looks great! Love the OPA integration.

They should have just named it errlang.

How about the fact that not all, or even most, dev machines run Linux, which is the only platform podman supports?

> That's cool, until you realise that the majority of the cities outside of the USA doesn't look like Miami Beach. I highly doubt that any "self-driving" car could travel through M…

Yeah. It's also used in some RPG games to denote quests which are done independently of the main quest.

> This is a good reason to make it mandatory to publish mugshots. Is it really though? Doesn’t seem like a necessary practice anywhere else in the world.

Certainly! Application and microservice authorization is probably one of the more common use cases for OPA, and there's definitely benefits in having a unified policy engine in an …

You could inject a custom authorizer and use something like OPA for fine grained access control. See https://github.com/Bisnode/opa-kafka-plugin for an example.

> Non-actionable warnings are meaningless. Agreed. Yet that’s exactly what they’re trying to make use of here. “The browser must not try to impersonate another browser like Chrome …

Additionally, this breaks completely if another authorizer than RBAC is involved.

Right, my response was primarily to the claim that “there are so few multi user machines in existence”. As for trust, there are probably few, if any, attack vectors more common tha…

Pretty much all servers I’ve ever worked with was multi-user. What’s even the alternative? A single account shared by all admins? That sounds like a nightmare from both a security …