andyroid

Yes, that is my bubble, pretty much. Sounds like I’m at the right place then. Better enjoy it while it lasts.

I don’t know a single developer who has an agent write 99% of their code. Is that the norm outside of my bubble?

> the interaction that people have with them now is the same interaction that everybody has always had with them

Right, that was my point. What does it matter what a diskette used to be? Unless something more obvious to convey storage/saving comes along, it’s hardly “crashing down” anytime soon.

Did it though? Most people young today probably never pressed a physical play/pause/stop button in their lives. Still, they get it. Some icons outlive their era, some don’t.

> In the 90s everybody knew how a paper book worked

I hope that’s still the case!

“we all would like corporations to share their products with us, but forcing us to pay because of their proprietary license is extremely anti-freedom to me”

No one is forcing you to do anything, and least of all which software licenses to depend on. If you don’t like something, choose something else. Freedom, you know?

As have Anthropic and OpenAI.

> We replaced all the commercial products our clients and ourselves used with our own

You’ll never guess what product your clients are looking to replace with their own next.

You’re not wrong, but what an IDE does when opening a project directory is an issue with that tool, and not one directly addressable by the maintainers of the dependency management tool.

The more direct comparison would be whatever the equivalence of “npm install” is for a given language, and what it allows to run. Sounds like they’re making good progress to fix that, but it’s certainly more than a popularity issue.

Free as in being trapped in Russia for life.

> never heard anyone suggest the best sports teams should stop competing when they've won enough, or that the best inventors should stop, or the best artists

While they want you to believe that, there’s no correlation between being rich and being best, or even good, at anything. You’re not the best athlete because your mom and dad were the best athletes. But if your parents were wealthy, you’re wealthy.

If they want standards to be applied ”consistently”, great. They can start by paying their taxes.

Does a hair transplant really count as a cure though? It’s more akin to a pricey baseball cap.

Not sure why that matters, but OpenFGA is an implementation of Zanzibar, which isn't exactly new. There are many similar implementations to choose from should one want to model authorization via a graph database.

Bundle servers provide a centralized "data plane" decoupled from the distributed component (OPA). You don't need to rebuild your policy any time data changes. Just push a new bundle with the data that changed, and OPA will fetch it as configured — either periodically or directly if long polling is configured.

https://www.openpolicyagent.org/docs/latest/management-bundl...

Where a company is founded is irrelevant with regards to the GDPR. If they have users in the EU, GDPR applies.

Looks great! Love the OPA integration.

They should have just named it errlang.

How about the fact that not all, or even most, dev machines run Linux, which is the only platform podman supports?

> That's cool, until you realise that the majority of the cities outside of the USA doesn't look like Miami Beach. I highly doubt that any "self-driving" car could travel through Munich today without killing at least a couple of pedestrians or cyclists.

Yeah, simply stating that they aren't yet at GA status seems pretty uncontroversial. Gotta start somewhere though :)

> BTW, only because sometimes I feel safe enough to ride my bike without hands on, it doesn't means I have a self-riding-bike.

Right, that was pretty much the point of the article.

Yeah. It's also used in some RPG games to denote quests which are done independently of the main quest.

> This is a good reason to make it mandatory to publish mugshots.

Is it really though? Doesn’t seem like a necessary practice anywhere else in the world.

Certainly! Application and microservice authorization is probably one of the more common use cases for OPA, and there's definitely benefits in having a unified policy engine in an organization or company.

You could inject a custom authorizer and use something like OPA for fine grained access control. See https://github.com/Bisnode/opa-kafka-plugin for an example.

> Non-actionable warnings are meaningless.

Agreed. Yet that’s exactly what they’re trying to make use of here.

“The browser must not try to impersonate another browser like Chrome or Firefox.”

Additionally, this breaks completely if another authorizer than RBAC is involved.

Right, my response was primarily to the claim that “there are so few multi user machines in existence”.

As for trust, there are probably few, if any, attack vectors more common than privilege escalation, so I’m not sure I follow that line of reasoning either.

Pretty much all servers I’ve ever worked with was multi-user. What’s even the alternative? A single account shared by all admins? That sounds like a nightmare from both a security and an auditing perspective.

That would be microservices. Like you said there’s rarely a need to break apart services beyond that, and that’s fine.

That says nothing without knowledge about the next largest financial penalty. It could just as well be the _first_ financial penalty dealt in the history of the company.

Those are features of Apple Monopoly rather than Apple Music.

We use OPA for use cases ranging from kubernetes admission control, to microservice authorization and CI/CD pipeline policies. It's one of those tools you can't realize you could have lived without once you start using it.