Live data from Hacker News

Zed Shaw - The ACL is Dead - CUSEC 2008

blog.cusec.net

11–20 of 55 posts

Re: Zed Shaw - The ACL is Dead - CUSEC 2008

#13
post #3

Notes from lunchtime viewing of first 40 min ------------------------------------ ~9:29: "law is actually kind of a turing complete language" Law is fuzzy; ACLs are fuzzy. ACLs can't handle real law because they're not Turing complete. ~11:20: had a business manager learn Ruby, had him implement poorly specified/tough features --> result: he modified/eliminated requirement ~12:20: a bunch of if statements are easier…

Thanks for posting this; the part at 40:00 actually motivated me to view the rest, which I recommend to anybody working in a corporate job. Hopefully this summary does justice to the remainder (but IMO it's worth watching): 40:00 Essentially he says you're not defined by your job. Your outside projects represent your self-expression and the corporation doesn't get a piece of that. 42:00: Most companies treat programm…

[deleted]

Re: Zed Shaw - The ACL is Dead - CUSEC 2008

#14

I love that he's saying "The ACL is Dead." This should be said loudly and often. Maybe it'll get through the heads of management out there. Heck, it needs to get through the heads of a lot of programmers. Modern security and access controls need functionality like capabilities.

Any links? As only a sometime-programmer, the "ACL is Dead" idea is new to me. I could use some good examples.

Re: Zed Shaw - The ACL is Dead - CUSEC 2008

#15
post #3

Notes from lunchtime viewing of first 40 min ------------------------------------ ~9:29: "law is actually kind of a turing complete language" Law is fuzzy; ACLs are fuzzy. ACLs can't handle real law because they're not Turing complete. ~11:20: had a business manager learn Ruby, had him implement poorly specified/tough features --> result: he modified/eliminated requirement ~12:20: a bunch of if statements are easier…

Thanks for posting this; the part at 40:00 actually motivated me to view the rest, which I recommend to anybody working in a corporate job. Hopefully this summary does justice to the remainder (but IMO it's worth watching): 40:00 Essentially he says you're not defined by your job. Your outside projects represent your self-expression and the corporation doesn't get a piece of that. 42:00: Most companies treat programm…

Q&A was good - I think Zed is wildly missing the non technology/boring business aspects of starting up (I guess he hasn't tried to start something up before? Or maybe he has...).

Re: Zed Shaw - The ACL is Dead - CUSEC 2008

#16
Lots of stuff here that resonates with this some-time CMS architect and soulless corporate wage slave, but I missed the part where Zed was able to provide an easy-to-use UI to allow non-programming sysadmins to change the security rules. That must have been so simple he didn't need to mention it, right... right?

Re: Zed Shaw - The ACL is Dead - CUSEC 2008

#17
post #3

Notes from lunchtime viewing of first 40 min ------------------------------------ ~9:29: "law is actually kind of a turing complete language" Law is fuzzy; ACLs are fuzzy. ACLs can't handle real law because they're not Turing complete. ~11:20: had a business manager learn Ruby, had him implement poorly specified/tough features --> result: he modified/eliminated requirement ~12:20: a bunch of if statements are easier…

on "steak and strippers...." - well I think there is a fundamental misunderstanding - ALL input products (not just software based) is sold this way to large corporations. Everyone has an agenda. Also - its not just big enterprisey things - rails is so common in the enterprise these days due to the "steak and strippers...." work done by companies like thoughtworks. There is always wheeling and dealing, even with grass…

There was a story on HN several months ago about a guy on vacation in Istanbul having someone sell him a rug even though he never had any intention of getting one. It outlined a whole lot of non-bullying sales tactics that had nothing to do with the actual product, it was more about putting a person in an environment and state of mind where they felt like getting the product, even if they never really wanted it.

Re: Zed Shaw - The ACL is Dead - CUSEC 2008

#18

Earlier quoted context omitted.

Thanks for posting this; the part at 40:00 actually motivated me to view the rest, which I recommend to anybody working in a corporate job. Hopefully this summary does justice to the remainder (but IMO it's worth watching): 40:00 Essentially he says you're not defined by your job. Your outside projects represent your self-expression and the corporation doesn't get a piece of that. 42:00: Most companies treat programm…

Q&A was good - I think Zed is wildly missing the non technology/boring business aspects of starting up (I guess he hasn't tried to start something up before? Or maybe he has...).

Reading your post and considering it further, I guess his message is less about starting up than about how to survive a day job and continue to grow as a human being by doing interesting work at night.

Blub work on a startup at night could be another path away from employment that isn't really addressed in the presentation (though it's very difficult to pull off, IMO).

Re: Zed Shaw - The ACL is Dead - CUSEC 2008

#19
post #3

Notes from lunchtime viewing of first 40 min ------------------------------------ ~9:29: "law is actually kind of a turing complete language" Law is fuzzy; ACLs are fuzzy. ACLs can't handle real law because they're not Turing complete. ~11:20: had a business manager learn Ruby, had him implement poorly specified/tough features --> result: he modified/eliminated requirement ~12:20: a bunch of if statements are easier…

Thanks for posting this; the part at 40:00 actually motivated me to view the rest, which I recommend to anybody working in a corporate job. Hopefully this summary does justice to the remainder (but IMO it's worth watching): 40:00 Essentially he says you're not defined by your job. Your outside projects represent your self-expression and the corporation doesn't get a piece of that. 42:00: Most companies treat programm…

I haven't personally worked there, but from everything I know I have to second his idea that you shouldn't work for a big huge video game company (chiefly EA) because you like games and want to make your own. If you have the capital and the skills to make games on your own and/or with a few friends, go for it! The late 2000s are proving to be a sort of golden age of indie gaming from both ends of the transaction.

edit: Also, unrelated to this, another question/answer pair starts around 66:00 which I think is a pretty good idea.

Post reply on HN