andyroid

We replaced all the commercial products our clients and ourselves used with our own

You’ll never guess what product your clients are looking to replace with their own next.

You’re not wrong, but what an IDE does when opening a project directory is an issue with that tool, and not one directly addressable by the maintainers of the dependency management tool.

The more direct comparison would be whatever the equivalence of “npm install” is for a given language, and what it allows to run. Sounds like they’re making good progress to fix that, but it’s certainly more than a popularity issue.

Free as in being trapped in Russia for life.

never heard anyone suggest the best sports teams should stop competing when they've won enough, or that the best inventors should stop, or the best artists

While they want you to believe that, there’s no correlation between being rich and being best, or even good, at anything. You’re not the best athlete because your mom and dad were the best athletes. But if your parents were wealthy, you’re wealthy.

If they want standards to be applied ”consistently”, great. They can start by paying their taxes.

Does a hair transplant really count as a cure though? It’s more akin to a pricey baseball cap.

Not sure why that matters, but OpenFGA is an implementation of Zanzibar, which isn't exactly new. There are many similar implementations to choose from should one want to model authorization via a graph database.

Bundle servers provide a centralized "data plane" decoupled from the distributed component (OPA). You don't need to rebuild your policy any time data changes. Just push a new bundle with the data that changed, and OPA will fetch it as configured — either periodically or directly if long polling is configured.

https://www.openpolicyagent.org/docs/latest/management-bundl...

Where a company is founded is irrelevant with regards to the GDPR. If they have users in the EU, GDPR applies.

Looks great! Love the OPA integration.

They should have just named it errlang.

How about the fact that not all, or even most, dev machines run Linux, which is the only platform podman supports?

That's cool, until you realise that the majority of the cities outside of the USA doesn't look like Miami Beach. I highly doubt that any "self-driving" car could travel through Munich today without killing at least a couple of pedestrians or cyclists.

Yeah, simply stating that they aren't yet at GA status seems pretty uncontroversial. Gotta start somewhere though :)

BTW, only because sometimes I feel safe enough to ride my bike without hands on, it doesn't means I have a self-riding-bike.

Right, that was pretty much the point of the article.

Yeah. It's also used in some RPG games to denote quests which are done independently of the main quest.

This is a good reason to make it mandatory to publish mugshots.

Is it really though? Doesn’t seem like a necessary practice anywhere else in the world.

Certainly! Application and microservice authorization is probably one of the more common use cases for OPA, and there's definitely benefits in having a unified policy engine in an organization or company.

You could inject a custom authorizer and use something like OPA for fine grained access control. See https://github.com/Bisnode/opa-kafka-plugin for an example.

Non-actionable warnings are meaningless.

Agreed. Yet that’s exactly what they’re trying to make use of here.

“The browser must not try to impersonate another browser like Chrome or Firefox.”

Additionally, this breaks completely if another authorizer than RBAC is involved.

Right, my response was primarily to the claim that “there are so few multi user machines in existence”.

As for trust, there are probably few, if any, attack vectors more common than privilege escalation, so I’m not sure I follow that line of reasoning either.

Pretty much all servers I’ve ever worked with was multi-user. What’s even the alternative? A single account shared by all admins? That sounds like a nightmare from both a security and an auditing perspective.

That would be microservices. Like you said there’s rarely a need to break apart services beyond that, and that’s fine.

That says nothing without knowledge about the next largest financial penalty. It could just as well be the _first_ financial penalty dealt in the history of the company.

Those are features of Apple Monopoly rather than Apple Music.

We use OPA for use cases ranging from kubernetes admission control, to microservice authorization and CI/CD pipeline policies. It's one of those tools you can't realize you could have lived without once you start using it.

From a Nordic country myself and have never experienced that effect, nor heard of anyone who would eat it for that. We just like it for the taste. Getting a little more cautious from reading all the comments here though!

So instead of we’ve got rampant racism, conspiracy theories, fake news and attempts to sway elections in that direction all over the world. If that’s the good experience, bring back the midis!

Pretty much any language running on the JVM will make it dead simple to import and use libraries written in Java - in fact one of the main reasons to choose the JVM is the huge amount of high quality libraries available. So while true that Java != JVM, it’s not as simple as that either.

From my friends in Poland I hear many of them are considering moving after the latest election and the direction the country seems to be heading. Good to know there are tech workers from Belarus to step into their positions.

Swede here. Like you say our isolation is pretty much volountary, with only larger groups gathering being banned - though I very much doubt that would happen anyway should it be allowed. Our neighboring countries who opted for total lockdown are slowly starting to open up too. I think the death toll in pretty much any country will be primarily depending on how well you’ve protected your elderly. We’ve done OK but could certainly have done better. Though still very far from the “devastatingly wrong” claim above.

Releasing a product before it is done is can of worms in itself

Perhaps, but a programming language which is released when “done” is essentially dead on arrival. I’d guess the people who created amazing things with Odin helped the language move forward, right? Nothing wrong with keeping something to oneself, but promising for a long time to move something into an open source model with no set date.. I’ve rarely seen that end well. Hope I’m proved wrong though!