Live data from Hacker News

Viewing profile — ymyms

ymyms

HN member
Joined
Thu, Apr 20, 2023, 6:33 PM UTC
HN karma
68
Public activity
40 items

About ymyms

building hessra.net: easy identity and authorization for any machine, service, or agent

identity and authorization suck still, and I think its because most tools/protocols are built on crappy primitives. i'm trying to build better ones using biscuits

do you have something you want to give identity and/or fine-grained authorization but it's too much effort? tell me about it. any auth problems at all? i'm happy to help (even if it means you use something other than my thing).

jake@hessra.net

Recent public activity

  1. comment
    Comment #48114221

    I was shocked by this as well. I think it's a natural property of large organizations and it takes great effort and great leaders to fight it. The way I think about it is that buil…

  2. comment
    Comment #47802432

    There are definitely salient points in the article and I appreciate its value in imploring us to really stop and consider the ramifications of what this technology might deliver. I…

  3. comment
    Comment #47747958

    I'm making capability security for distributed systems. The primitives and engine are both open source. Primitives: https://github.com/Hessra-Labs/hessra-tokens Engine: https://git…

  4. comment
    Comment #46833348

    They apparently are working on and are going to release 2(!) different versions of siri. Idk, that just screams "leadership doesn't know what to do and can't make a tough decision"…

  5. comment
    Comment #46610756

    A human SWE can use an LLM to refactor and reduce some of the debt just as easily too. I think fundamentally, the possible rate of new code and new technical debt introduced by LLM…

  6. comment
    Comment #46610710

    All code is technical debt though. We can't spend infinite hours finding the absolute minima of technical debt introduced for a change, so it is just finding the right balance. Tha…

  7. comment
    Comment #46610624

    I also feel like it makes me more productive but measuring software engineering productivity is famously difficult. If there was an easy way to measure it, managers at bigco would …

  8. comment
    Comment #46610523

    Huh? Where did I say that's what I like? I'm just trying to discuss for discussion's sake. Personally, I want a world that rewards the people who put their thought, care, and craft…

  9. comment
    Comment #46610412

    I didn't mean to imply LoC as a measurement of productivity. What I really mean is more "amount of useful code produced to a level the human-using-the-llm determines to be useful".…

  10. comment
    Comment #46610251

    My gut says that is not a property of LLM evangelists, but a property of current internet culture in general. People with strong, divisive, and engaging opinions seem to do well (b…

  11. comment
    Comment #46610209

    I mean, isn't driving the business forward really what matters (outside of academia, open source, and other such endeavors). We live in a hyper competitive market. All else being e…

  12. comment
    Comment #46610135

    "I find LLMs useful as a sort of digital clerk - searching the web for me, finding documentation, looking up algorithms. I even find them useful1 in a limited coding capacity; with…

  13. comment
    Comment #46580065

    Heh yeah, my comment does kinda scream credit card. What I really mean is something programmable for narrow use-cases like multiple forms of payments, transit, or other stuff like …

  14. comment
    Comment #46579619

    I'm working on https://www.hessra.net/ We've built a new auth platform with some new identity primitives and capability-style tokens using biscuits. Right now, I'm trying to figure…

  15. comment
    Comment #46557289

    I wonder if this makes room in the market for some simpler device for payments. Something like a wearable that you can tap-to-pay and has the signed software attenuation but nothin…

  16. comment
    Comment #46545035

    You are very on base. In fact, there is a deep conflict that needs to be solved: the non-determinism is the feature of an agent. Something that can "think" for itself and act. If y…

  17. comment
    Comment #46452735

    Driving a car that old puts yourself and others on the road at greater risk due to lack of safety features compared to a modern car. One could argue being able to afford a new car …

  18. comment
    Comment #46268028

    I'm working on https://www.hessra.net/ It's a full identity and authorization platform targeted for service-to-service use cases. But my focus the last couple months has been to ma…

  19. comment
    Comment #46164691

    Another benefit is that you can provision ephemeral resources with an identity that has an expiration to match the resource’s lifecycle. Then, you don’t need to figure out rotation…

  20. comment
    Comment #46162593

    I’ve been working on an identity/authorization system for machines and kept getting stuck on a basic question: what is machine identity, independent of any one stack (Kubernetes, c…

  21. story
  22. comment
    Comment #45869386

    Building https://www.hessra.net/ , an authorization system based on the Biscuit token format (decentralized, signed, and attenuable). The goal is to push beyond JWTs and Zanzibar-s…

  23. comment
    Comment #45775444

    I have the nano-texture display on my M4. At this point, I don't think I can go back to standard glass. For text work, I find there are no downsides. If you work more with color an…

  24. comment
    Comment #45775394

    I think my ideal would be a MacBook Air with both the nano-texture and higher 120hz refresh rate the Pro has. With that, I'll trade an extra second of compile time for my rust proj…

  25. comment
    Comment #45774362

    Another idiomatic pattern is using shadowing to transform something using itself as input: let x = Foo::new().stuff()?; let x = Bar::new(x).other_stuff()?; So with the math example…