News for hackers. Stuff that matters.

viovanov

Re:Aserto: Developer API for permissions and RBAC on Wednesday February 16, 2022 @11:11AM (#30361824)
If the caller can authenticate with the services, I think you can write some rego that does something like this. I'm interested in what the flow looks like. Does the caller talk to A first to initiate this delegation?
Re:Policy CLI – “Docker” for your OPA policies on Thursday February 10, 2022 @01:01PM (#30290068)
We're working on it.. coming soon!
Re:Policy CLI – “Docker” for your OPA policies on Thursday February 10, 2022 @10:39AM (#30287687)
We also use it to drive all the github actions around managing policies https://github.com/opcr-io/?q=policy-action
Re:How the modern world arose from imaginary numbers on Thursday February 10, 2022 @10:37AM (#30287633)
Does four really exist as 4? Maybe it's just 2 squared.
We're working on support for partial evaluation in our system at Aserto https://aserto.com/
if you use something like OPA, it has partial evaluation [1], which would allow you to read in data, filter it based on your RBAC policy quickly until you have a pageful, then return to the caller together with some next page token that lets you remember where you left off.

[1] https://blog.openpolicyagent.org/partial-evaluation-162750ea...

Once you start using policies as code, something like this is great because you need something to handle the lifecycle of your policy artifact.
Re: on Wednesday February 09, 2022 @11:52AM (#30274880)
Is there a public database of medications and their active ingredients?
Re:Ask HN: What's your solution for SSL on internal servers? on Wednesday February 09, 2022 @08:47AM (#30272535)
I'll try to do this for internal IPs using traefik on Kubernetes. Any pointers?
Re:Ask HN: What's your solution for SSL on internal servers? on Wednesday February 09, 2022 @08:45AM (#30272515)
I thought Let's Encrypt wouldn't give you a cert if the domain on the cert resolves to a private IP. Good to know - thx.
Re:A Lonely Universe on Wednesday February 09, 2022 @08:42AM (#30272489)
I think you need multiple generations (subsequent) of stars in order to get heavier elements - which are probably needed by life. So maybe the universe is not _that_ old.

https://www.quora.com/How-many-generations-of-stars-have-the...

Re:Ask HN: What's your solution for SSL on internal servers? on Wednesday February 09, 2022 @08:37AM (#30272437)
Then you're routing internal traffic through a public IP? Or do they support wildcard certs?
Re:Open Textbook Initiative on Wednesday February 09, 2022 @08:13AM (#30272218)
Reminds me of Feynman's anecdote about how math textbooks were evaluated by the Curriculum Commission.

"The reason was that the books were so lousy. They were false. They were hurried. They would try to be rigorous, but they would use examples (like automobiles in the street for "sets") which were almost OK, but in which there were always some subtleties. The definitions weren't accurate. Everything was a little bit ambiguous – they weren't smart enough to understand what was meant by "rigor." They were faking it. They were teaching something they didn't understand, and which was, in fact, useless, at that time, for the child."