News for hackers. Stuff that matters.

hardbyte

hardbyte on Hacker News

Re:Show HN: Interactive PostgreSQL Permissions on Friday August 21, 2026 @04:29PM (#49393402)
ty. I'm pushing opentelemetry metrics which we use for alerting. I had thought about emitting PolicyReports from the operator too
Re:Show HN: Interactive PostgreSQL Permissions on Friday August 21, 2026 @06:52AM (#49386288)
pgroles is a declarative PostgreSQL role manager (YAML in, plan/apply out, CLI or Kubernetes operator). This interactive tutorial walks through a few common Postgres permission errors that you might run into.

You run queries against real PostgreSQL 18 compiled to WASM (PGlite). Building up from early broad grants directly on users in the first section through to abstractions around owners, login roles and roles that scope access.

Show HN: Obsidian plugin that uses your existing LLM CLI tools

Posted by hardbyte on Monday January 26, 2026 @10:44PM
from the show-hn dept.

https://github.com/hardbyte/obsidian-llm-plugin

I built an Obsidian plugin that connects to Claude Code, Gemini CLI, or Codex - whatever you have installed. No API keys to configure in the plugin; it just delegates to the CLI tools you already use.The LLM gets full access to your vault - it can read notes, create files, search. Ask "what did I write about X last month" and it finds and reads the files.Uses ACP (Agent Client Protocol) for...

( Read More... | no comments | on HN )
Re:Show HN: A Python CEL implementation (written in Rust) on Friday August 08, 2025 @10:15PM (#44843528)
Hopefully clear I'm not trying to take credit for the upstream work!

Show HN: A Python CEL implementation (written in Rust)

Posted by hardbyte on Friday August 08, 2025 @06:31PM
from the show-hn dept.

I've been working on a Python library for the Common Expression Language (CEL). It's a wrapper around the cel-rust crate which is under heavy development. The python wrapper uses PyO3 and Maturin to handle the Rust-Python interop.CEL is a safe, fast, non-Turing complete expression language, great for things like configuration, validation rules, or policy engines where you need to evaluate...

( Read More... | 3 comments | on HN )
Re:Gatehouse – a composable, async-friendly authorization policy frame... on Tuesday March 25, 2025 @12:25AM (#43468126)
Yeah a big motivation for us was avoiding the need to keep another system up to date. Gatehouse basically sits at the execute policy layer, and we let the application code decide how to unify the data (or not).

Oso local authorization looks like a fantastic solution.

Re:Gatehouse – a composable, async-friendly authorization policy frame... on Tuesday March 25, 2025 @12:00AM (#43468021)
You're spot on - we wanted to support some async graph traversal calls similar to the ReBAC example and therefore made the evaluate_access call async. I also wanted to support short circuiting such that somewhat expensive IO calls might be skipped by returning early from a policy that didn't need to make that call.
Re:Gatehouse – a composable, async-friendly authorization policy frame... on Monday March 24, 2025 @11:51PM (#43467968)
Nah, I think your intuition is correct it should be broken up.
Re:Gatehouse – a composable, async-friendly authorization policy frame... on Monday March 24, 2025 @11:49PM (#43467963)
BYO persistence
Re:Gatehouse – a composable, async-friendly authorization policy frame... on Monday March 24, 2025 @11:46PM (#43467949)
Thanks! I'm a big fan of Cedar and DSLs such as CEL and gorules. Hopefully there is a place for a Rust solution as well.
Re:Gatehouse – a composable, async-friendly authorization policy frame... on Monday March 24, 2025 @11:39PM (#43467913)
I did put licence = "Apache-2.0" in the Cargo.toml but Partly is okay with it being MIT. Update the repo to explicitly add the license text now. Thanks for the call out
Re:Gatehouse – a composable, async-friendly authorization policy frame... on Monday March 24, 2025 @06:50PM (#43466222)
async-friendly Rust native library with decision traceability.
Re:Netchecks – cloud native tool for checking network controls on Saturday April 15, 2023 @01:14AM (#35577787)
It's particularly useful for detecting issues such as inadvertent IAC changes that can have significant consequences on your cluster's network connectivity and security.

Netchecks has:

* An easy-to-use CLI netcheck for running network checks locally.

* A helm installable operator for Kubernetes: create "NetworkAssertions" to have netchecks periodically ensure your cluster's network conditions are working as specified.

* Monitoring and alerting: integrate with Prometheus and Alertmanager to monitor your network checks' results and receive alerts for any discrepancies.

* Custom validation rules using CEL expressions, allowing you to specify precise conditions for checks to pass or fail.

Check out the project docs at docs.netchecks.io and the code on GitHub: https://github.com/hardbyte/netchecks

I'd love to hear your feedback and suggestions for improvement, so feel free to open issues, contribute.

Stay vigilant!

Re:Practical homomorphic encryption over integers (2017) on Monday July 23, 2018 @10:56PM (#17597781)
Even with partially homomorphic encryption and additional "privacy preserving protocols" you can carry out pretty general computation tasks such as machine learning. Have a look at this blog post using the Paillier cryptosystem for a federated linear regression - https://blog.n1analytics.com/distributed-machine-learning-an...
Re:Let's Encrypt, OAuth2, and Kubernetes Dashboards on Monday May 14, 2018 @05:12AM (#17063956)
I'm really just writing up what I did so the internet can tell me what I did wrong...
Re:Edward – A Turing-Complete Language for Deep Probabilistic Programming on Friday October 20, 2017 @01:02AM (#15513636)
There is another Tensorflow bayesian programming library called Aboleth - https://github.com/data61/aboleth

Older »