News for hackers. Stuff that matters.

boorad

boorad on Hacker News

Show HN: Counterbranch – See how your PR changes access control

Posted by boorad on Monday October 05, 2026 @11:24PM
from the show-hn dept.

https://github.com/marketplace/actions/counterbranch-access-control-change-review

Hi, we just released Counterbranch as a GitHub Action (alpha) and are looking for feedback.The action scans your codebase looking for unintended changes to authorization. This can happen in custom code, endpoints, guards, rbac, abac, policy-as-code files, etc. and can lead to broken access control or data exposure.The scanner doesn't use LLMs and is blazing fast. The results show up as a...

( Read More... | no comments | on HN )

Show HN: Zift – find authorization logic in your code

Posted by boorad on Tuesday May 05, 2026 @09:23PM
from the show-hn dept.

https://github.com/enforceauth/zift

I made a code scanner that finds embedded authorization code in your codebases so you can externalize it to Policy as Code.https://github.com/EnforceAuth/ziftWritten in Rust, so it hums through code.Supports JS/TS/Java/Go/Python/C# now, more coming. Outputs Rego for OPA now, Cedar coming soon.You can hook up your local agent for a `--deep` scan

( Read More... | no comments | 3 points | on HN )
Re:Our startup tested during the Halftime Show. What does HN think? on Monday February 06, 2012 @11:46PM (#3560489)
done
Re:Our startup tested during the Halftime Show. What does HN think? on Monday February 06, 2012 @11:06PM (#3560410)
While the post was meant as a follow-up for the people helping us test, you are right that we're not clear about the product. Our homepage http://heartbyte.com gives you a sense of how the audience votes during the event with their mobile devices. Also, a link was added to post :)
Re:Our startup tested during the Halftime Show. What does HN think? on Monday February 06, 2012 @10:48PM (#3560361)
Our test was just 'friends and family,' and a small but growing beta testers mailing list. See the right of the page if you want to join.
Re:Our startup analyzed the debate last week. What do you think? on Tuesday January 31, 2012 @08:16PM (#3536155)
uncle. fixed.
Re:Our startup analyzed the debate last week. What do you think? on Tuesday January 31, 2012 @07:54PM (#3536078)
We have some rough edges on our web presence to be sure. This may help a bit on the UI front: http://heartbyte.com/s/hn

As for the tech, given the requests we need to handle from our distributed queue, we do clustered stream processing in near realtime. Our broadcast customers want a line on their screen within a second or two.

And for now we are bootstrapped.

Re:Rate This Startup: Innovative Video and Audio based Issue Management on Friday February 18, 2011 @08:48PM (#2238078)
Have you verified with legal counsel that Dunkin' Donuts will license Deez Nutz for perpetual use?
Re:Cloudant's BigCouch is Now Open Source on Tuesday August 31, 2010 @07:28AM (#1649016)
Correct, just replicate between standalone Couch and Cloudant seamlessly. Replication is a powerful feature of CouchDB, and we also use it internally to synchronize partitions if they diverge. It is pivotal in how we achieve our multi-datacenter capabilities, too.
Re:Cloudant's BigCouch is Now Open Source on Monday August 30, 2010 @07:11PM (#1647814)
as Chris said, it's more like the other systems. See http://blog.cloudant.com/dynamo-and-couchdb-clusters for more information on our clustering.
Re:Cloudant's BigCouch is Now Open Source on Monday August 30, 2010 @04:07PM (#1647383)
lzw send us an email... we can almost certainly map out something that fits your needs. [email protected]
Re:Cloudant's BigCouch is Now Open Source on Monday August 30, 2010 @01:46PM (#1646926)
seiji, we are planning on releasing the apps separately as well (esp. rexi) and accompanied with blog posts. Also, we will transition the copies of apps that we have been using to their public projects (ibrowse, mochiweb, etc). But we wanted to get this open first. Thanks for the feedback.
Re:The dark side of NoSQL on Thursday October 01, 2009 @10:52AM (#855004)
It will soon. We have an 8-node cluster running in PROD right now. A Dynamo-like layer provides consistent hashing, partitioning, read/write quorum constants and the like.
Re:Bottling the Magic Behind Google and Facebook on Monday March 16, 2009 @07:49PM (#519010)
I can only guess how they're going to do, business model-wise, but big data doesn't necessarily mean big companies or web properties as you suggest. Small startups can do compelling things if they make sense out of big data. It's a tedious and often impossible job now for just about everyone. Companies displaying competence will do quite well for at least the beginning phase of this movement, and have customers both big and small.

My gut says that it will become commonplace to need to handle tera or petabyte-sized data. 640K turned out to be a wee bit shy of our memory needs. Traditional RDBMS's will turn out to be a wee bit shy of our analysis needs.

Re:Ask HN: Which school do you attend? on Saturday January 17, 2009 @09:20PM (#438908)
hopefully one of those upvotes is pg
Re:Ask HN: Which school do you attend? on Saturday January 17, 2009 @01:23PM (#438350)
Cornell University
Re:Twitpay.me Launches on Wednesday November 19, 2008 @11:27AM (#369587)
that's hawt. I see this as a great way to settle spontaneous bets w/ friends.

Dude, $50 the Smails kid picks his nose.

Re:Apache CouchDB 0.8.0 escapes! on Wednesday June 25, 2008 @08:59PM (#228119)
and the release email: http://apache.markmail.org/message/bchydjlojwbbkqkl?q=couchd...
Re:Lisp as Blub on Monday April 14, 2008 @02:33PM (#163346)
It's a pretty robust axe
Re:Why is D/Tango so fast at parsing XML? on Wednesday March 12, 2008 @12:42PM (#135236)
For the benchmarks, see: http://dotnot.org/blog/archives/2008/03/10/xml-benchmarks-up... and a history in March '08 and Feb '08.