fortyfivan

My favorites are a bit later – Lanquidity (1978) and Sleeping Beauty (1979).

A good start might be the lone release on Savoy, The Futuristic Sounds of Sun Ra (1962) – China Gates is such a hypnotic jam.

This is a good read on Saturn: https://londonjazzcollector.wordpress.com/2021/07/09/beginne...

Top 10s are always tough, but I'll give it a shot. I have a penchant for the obscure, but if I were to consider total output, my list would be (I know I'm leaving some out)...

- Arthur Verocai (anything he arranged) - Joyce Moreno - Jorge Ben - Milton Nascimento - Edu Lobo - Nara Leao - Elis Regina - Marcos Valle - Gal Costa - Joao Donato

And a bonus top 5 groups

- Tamba Trio - Novos Baianos - Azymuth - Quarteto Em Cy - Dom Salvador's groups (Rio 65, Salvador Trio, etc.)

For a deep dive into the obscure stuff, I used to do a podcast from my collection. Lots here to keep anyone busy.

https://novedos.com/

https://www.independent.co.uk/arts-entertainment/music/featu...

There’s a recent book compiling much of the original cover art. Recommended.

Sun Ra: Art on Saturn: The Album Cover Art of Sun Ra's Saturn Label https://a.co/d/7h3J9II

Exactly right... BeyondCorp is more of a reference architecture than a product. Google's own internal implementation is what the research papers focus on, but we're seeing more companies adopt similar models by shifting access controls to the application layer, where a request can be independently authenticated (corporate IdP) and authorized (RBAC, policies) against more dynamic conditions - such as the security posture of the user's device.

The Identity piece is a critical component to the system as the user system of record, but really just one of the inputs in a BeyondCorp-like environment.

https://www.scaleft.com/blog/how-to-deploy-a-beyondcorp-styl...

I agree with many commenters that it appears transformative, but that's only through the lens of Google. Centralized access controls at Layer 7 through a proxy service that can authenticate and authorize requests, while brokering encrypted sessions isn't that out of reach. Our goal at ScaleFT is to offer as much as a service as we can.

Where things do get tricky, though, is with the access policies and device attestation in a BYOD environment. Admittedly, we have work to do in this regard, but it may not require a full MDM layer. Really, you only need to query device state at a given time to make an authZ decision.

Love to see BeyondCorp get more coverage, and I hope to see further adoption outside of Google.

Similarly, apps are placed behind a reverse proxy, which performs authN via your company's IDP, then authZ against the policies associated with the resource. These can be basic RBAC or more device oriented decisions such as whether the client disk is encrypted.

We also believe a SaaS model is the way to make BeyondCorp a reality for companies who aren't Google, but there's more to it than a proxy service. We've found the more challenging aspects of a complete system to be the policy engine and device bindings, and have spent the past couple years working to offer with our product.

Glad to see CloudFlare talking about BeyondCorp, the more who are providing solutions in this space, the easier it will be for companies who are not Google to get there.

My eventual life goal is to do something similar with my Brazilian record collection... have the skeleton of such catalog at: https://www.novedos.com/collection.