Readit News logoReadit News
alephu5 commented on Solving Fine Grained Authorization with Incremental Computation   feldera.com/blog/fine-gra... · Posted by u/gz09
alephu5 · 8 months ago
I've been interested in this problem space for a couple of years, have tried a whole bunch of products but settled on using cedar policy engine[1] wrapped in some custom code and using the application database and static files to generate policies that can be concatenates to make decisions. A useful property is that they can be indexed based on the "subject verb object" triplet used to represent authorisation queries (e.g. Can "John" download "File 1"?)

Have tried a whole bunch of other FGA providers with their own storage and retrieval services, I think that fundamentally all the DSLs are just variants on prolog and can be quite easily transformed into one another. Another thing to consider is that authorisation is in the critical path of everything, so if you need to call out to an external service it's going to add latency and becomes a single point of failure. Not to mention that it creates an explosion of complexity by distributing the system more widely, so if you can leverage your existing database and file storage to manage policies it's probably easier to build and mange long-term.

Overall I think it's worthwhile using an FGA solution to separate authorisation from business logic, I expect this will become industry standard in the years to come.

[1] https://www.cedarpolicy.com/en

alephu5 commented on Heavy marijuana use increases schizophrenia in men, study finds   bloomberg.com/news/articl... · Posted by u/shaburn
spicyusername · 2 years ago
Can we please stop making marijuana so strong.

I already cut my marijuana with 50% CBD, and that's still plenty strong that I only need a single hit to be plenty high.

I can't for the life of me understand why there's a race to the highest imaginable THC percentage, when it so clearly has an adverse effect on the experience.

alephu5 · 2 years ago
I imagine the people paying the most money have a high tolerance.
alephu5 commented on The UK will spend £100M to develop its own 'sovereign' AI   engadget.com/the-uk-is-cr... · Posted by u/atlasunshrugged
hot_gril · 2 years ago
I'm reading this as, I should develop some kind of "sovereign" tech or consultancy company then rake in tons of govt contracts like this.
alephu5 · 2 years ago
You'll also need to befriend some conservative politicians.
alephu5 commented on Codeberg – Fast open source alternative to GitHub   codeberg.org/... · Posted by u/oblio
cxr · 2 years ago
You could almost certainly pay to host non-open source projects on Codeberg. It happens to be that the price is unlisted, though (and it's probably higher than what you or anyone else would want to spend, anyway).
alephu5 · 2 years ago
I pay $20 a year to develop private projects on source hut with CI and everything else included.
alephu5 commented on Should We Automate the CEO?   thehustle.co/should-we-au... · Posted by u/sahin
smadge · 2 years ago
This turns upside down the standard role of automation in control systems. E.g. the humans sets the temperature on the thermostat controller, or the pilot sets the parameters on the autopilot, but the plane is still under control of the pilot. Automated controllers don’t have goals that aren’t set by controllers above them in the hierarchy. In my opinion it’s definitionally impossible for automation to be the chief executive since there must be someone above setting the goals.
alephu5 · 2 years ago
Maximise returns on investment?
alephu5 commented on AWS Purity Test   awspuritytest.com/... · Posted by u/notamy
alephu5 · 3 years ago
I got a 96 and am pleased with that. I have serious concerns about Amazon as a company, they're too big and predatory.

I've been using AWS at various companies and have tried to embrace its paradigms but I hate them.

alephu5 commented on Don't Use Stripe    · Posted by u/alienfemale
docflabby · 3 years ago
Most small business I've found don't accept credit/debit cards for large transactions and instead want direct (cash) bank transfers because they fear the money going missing or getting a chargeback. This has its only issues as its slow and not very customer friendly.

If only there was some kind of virtual cash that could be sent from one party to another almost instantly without an intermediary

alephu5 · 3 years ago
The EU are working on something like this, it's like USDC but backed and exchanged by the European Central Bank.

https://www.ecb.europa.eu/paym/digital_euro/html/index.en.ht...

alephu5 commented on How I got involved in the Rust community   ochagavia.nl/blog/how-i-g... · Posted by u/wofo
maldev · 3 years ago
It doesn't. Use C#, Java, or even python. If you're low level and dealing with low level code and constructs, you're better off using C, or C++ just for the language features like templates.

Rust is genuinely only useful for the niche application of a desktop application, that doesn't reach low level, but you need a bit more fine grain controls than C# or another higher level language will allow. For example, a web browser is like the ideal usecase for Rust, and it makes sense, since that's really where it's got most of it's teeth with Mozilla.

I personally don't see why you would do something like Grep, in Rust, when C#, Python, Go, exist. But I do see like Unreal Engine or again, Firefox/webbrowser in Rust being nice.

alephu5 · 3 years ago
Grep is a performance sensitive program, it's not unusual to scan through thousands of files and millions of lines so small inefficiencies are noticeable.

If you tried this in python it would probably take hours to scan through something that ripgrep does in a few seconds

alephu5 commented on How I got involved in the Rust community   ochagavia.nl/blog/how-i-g... · Posted by u/wofo
cogman10 · 3 years ago
Don't forget startup and distribution time. It's not terribly hard to have a scratch rust container which is about as slim and secure as you can get. That container will startup pretty much instantaneously even if it's cold.

You are looking at ~5mb container vs 200+mb if you did a jvm based container.

It's probably overkill for most applications and companies, but it's something to keep in mind if you need fast scaling for cheap.

alephu5 · 3 years ago
Go has these same properties
alephu5 commented on The indie web is dead, long live the indie web (2019)   criticalmas.org/2019/06/t... · Posted by u/acqbu
Nursie · 3 years ago
Carrier-grade NAT. Generally rolled out due to IPv4 exhaustion.

Under CGNAT Your router does not get an externally reachable IP address from your ISP, as it sits behind ISP-level NAT router that assigns addresses to subscribers much like your home router assigns addresses to your home machines.

So you can’t run any sort of externally reachable service at all.

alephu5 · 3 years ago
My ISP gives a dedicated IPv4 to anyone that asks, everyone else goes on CGNAT. Hardly anyone asks so they don't mind.

u/alephu5

KarmaCake day412September 23, 2015View Original