Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

github.com

Post reply on HN
Print view View original

31–40 of 89 posts

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#31

Post by mintplant »

robotrout wrote: post #27
ibuildoss wrote: post #20

Earlier quoted context omitted.

It is extremely important to be sensitive to extremism of any kind, condemn extremist practices, beliefs, and views and take a stance against extremist ideologies. We do not share nor endorse extremist views nor "values", nor have anything to do with extremist groups whatsoever. We have not heard about them (Oath Keepers) before. We'll discuss a name change internally & with the community. ps: It also shares the name…

Oath Keepers is a non-partisan association of current and formerly serving military, police, and first responders, who pledge to fulfill the oath all military and police take to “defend the Constitution against all enemies, foreign and domestic.” That oath, mandated by Article VI of the Constitution itself, is to the Constitution, not to the politicians, and Oath Keepers declare that they will not obey unconstitution…

Oath Keepers is a far-right militia group with a history of racism and conspiracy-theorism (e.g. birtherism, sovereign citizenry) which regularly advocates and defends violent means of asserting these ideas. Pretty words from their mouths don't change that.

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#32

Post by robotrout »

mintplant wrote: post #31
robotrout wrote: post #27

Earlier quoted context omitted.

Oath Keepers is a non-partisan association of current and formerly serving military, police, and first responders, who pledge to fulfill the oath all military and police take to “defend the Constitution against all enemies, foreign and domestic.” That oath, mandated by Article VI of the Constitution itself, is to the Constitution, not to the politicians, and Oath Keepers declare that they will not obey unconstitution…

Oath Keepers is a far-right militia group with a history of racism and conspiracy-theorism (e.g. birtherism, sovereign citizenry) which regularly advocates and defends violent means of asserting these ideas. Pretty words from their mouths don't change that.

Citation needed.

The racist part is pretty amusing as 5 minutes watching interviews with black oath keepers would make obvious.

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#33

Post by crsv »

ibuildoss wrote: post #20
SauciestGNU wrote: post #18

Are you aware that this project shares a name with an extremist group[0]? I'm not sure how concerned you are about that, especially if you're not American, but I'd want to know if it were one of my projects. [0] https://www.splcenter.org/fighting-hate/extremist-files/grou...

It is extremely important to be sensitive to extremism of any kind, condemn extremist practices, beliefs, and views and take a stance against extremist ideologies. We do not share nor endorse extremist views nor "values", nor have anything to do with extremist groups whatsoever. We have not heard about them (Oath Keepers) before. We'll discuss a name change internally & with the community. ps: It also shares the name…

I would encourage that you not bend to the will of those who would impose upon you what your brand might be or might be associated with. If you make a meaningful product in your space and the origins of the name are easily explained through 1: your aforementioned wordplay and 2: the GoT reference (likely more common), then I think you should fight to keep a name you love and find meaning in.

As one of your potential customers / users, I would not base any judgement of your company or product based on some a shared name with a small fringe organization that some people find unsavory which uses a pretty common term or combination of terms.

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#34

Post by mintplant »

robotrout wrote: post #32
mintplant wrote: post #31

Earlier quoted context omitted.

Oath Keepers is a far-right militia group with a history of racism and conspiracy-theorism (e.g. birtherism, sovereign citizenry) which regularly advocates and defends violent means of asserting these ideas. Pretty words from their mouths don't change that.

Citation needed. The racist part is pretty amusing as 5 minutes watching interviews with black oath keepers would make obvious.

SauciestGNU already provided one, full of direct quotes from their leadership.

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#35

Post by jiveturkey »

ibuildoss wrote: post #2

The idea of the ory ecosystem ( https://github.com/ory / https://www.ory.am ) is to build a reliable, cloud native suite of tools which allow you to solve simple and complex IAM (identity and access management) use cases. Each service works standalone, but you can obviously combine them all. The Oathkeeper proxy is one piece of the puzzle which basically takes incoming HTTP requests, evaluates them on a set of rules…

> solve simple and complex IAM

really great. please comment on the intersection with auth0. clearly there is some overlap, it would be great to have a concise explanation.

> we do not want to reinvent the wheel

IMHO, were I you I would not shy away from that. Existing wheels are oval in shape. Of course where you have to interoperate, you are limited.

> ps: New account because I lost my password and didn't set up a backup email. Stupid me.

Well you just lost me. You are developing IAM components and you can't get basic password management correct? email has nothing to do with it, we are well past the point where password managers are de rigueur, certainly for anyone involved with security matters.

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#36

Post by avitzurel »

wereHamster wrote: post #19

I'm currently looking how to protect internal websites used within our company behind github oauth (we're a small company and we all have a github account connected to the company's github organization). Would this or one of the other tools that are part of the ory ecosystem work for this?

I built this [1] exactly for what you are describing

[1] https://github.com/KensoDev/micro-auth-proxy

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#37

Post by mmilano »

robotrout wrote: post #28
SauciestGNU wrote: post #18

Are you aware that this project shares a name with an extremist group[0]? I'm not sure how concerned you are about that, especially if you're not American, but I'd want to know if it were one of my projects. [0] https://www.splcenter.org/fighting-hate/extremist-files/grou...

The oathkeepers are not an "extremist group". I would humbly suggest that splcenter.org is wrong in this instance. https://oathkeepers.org/about/

If we were living in the colonial days, only the British would be calling them "radical" or "extremists". :D

Men of authority pledging not to bow to unconstitutional orders against citizens. Actually seems noble.

I suspect they get the "radical" and "extremist" label from our culture where those who aren't on the "correct" political side are labeled a Nazi or Communist.

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#38

Post by Rain4CNCF »

wereHamster wrote: post #19

I'm currently looking how to protect internal websites used within our company behind github oauth (we're a small company and we all have a github account connected to the company's github organization). Would this or one of the other tools that are part of the ory ecosystem work for this?

CoreOS's Dex would work for that: https://github.com/coreos/dex

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#39

Post by ibuildoss »

jiveturkey wrote: post #35
ibuildoss wrote: post #2

The idea of the ory ecosystem ( https://github.com/ory / https://www.ory.am ) is to build a reliable, cloud native suite of tools which allow you to solve simple and complex IAM (identity and access management) use cases. Each service works standalone, but you can obviously combine them all. The Oathkeeper proxy is one piece of the puzzle which basically takes incoming HTTP requests, evaluates them on a set of rules…

> solve simple and complex IAM really great. please comment on the intersection with auth0. clearly there is some overlap, it would be great to have a concise explanation. > we do not want to reinvent the wheel IMHO, were I you I would not shy away from that. Existing wheels are oval in shape. Of course where you have to interoperate, you are limited. > ps: New account because I lost my password and didn't set up a b…

> Well you just lost me. You are developing IAM components and you can't get basic password management correct? email has nothing to do with it, we are well past the point where password managers are de rigueur, certainly for anyone involved with security matters.

The password in my password manager is not correct. No idea how that happened, maybe it was overwritten by accident or I copied the wrong one during account creation. Since I had to reset my FF profile it was no longer stored in the FF password manager, so I had to recover it from KeePass, which well - didn't work out so well. Since I do use a password manager, it's impossible to recover it as I have no idea what the password is.

Re: Show HN: Oathkeeper – Cloud-Native Identity and Access Proxy

#40

Post by 11011011011 »

ibuildoss wrote: post #20
SauciestGNU wrote: post #18

Are you aware that this project shares a name with an extremist group[0]? I'm not sure how concerned you are about that, especially if you're not American, but I'd want to know if it were one of my projects. [0] https://www.splcenter.org/fighting-hate/extremist-files/grou...

It is extremely important to be sensitive to extremism of any kind, condemn extremist practices, beliefs, and views and take a stance against extremist ideologies. We do not share nor endorse extremist views nor "values", nor have anything to do with extremist groups whatsoever. We have not heard about them (Oath Keepers) before. We'll discuss a name change internally & with the community. ps: It also shares the name…

When they say "extremist" they mean "white people", goys.
Post reply on HN