2022 ~ latest news

Tell HN: A hacker's life is in danger, your awareness may be life saving
324 by michaeltimo | 25 comments on Hacker News.
It's been a month that Jadi (real name: Amir Emad Mirmirani), an Iranian geek, has been imprisoned in Iran's most notorious prison called Evin in Tehran. In Iran, he is one of the most famous people active in the field of programming and computer education. In his personal blog[0], he has been writing about technology and society for years. He has also a YouTube channel[1][2] to teach and encourage Iranians to programming and Linux, and a podcast[3] that has been explaining technology and science news along with his comments for several years. All this in a country with a dictatorial government where standing in the right place has a heavy price. His arrest occurred on October 5, a few days after the recent nationwide protests[4] began in Iran. Arrest at home with beating. The reason for this is not yet clear, but it is probably due to his efforts to increase awareness of the society about Iran's internet censorship system, and his positions against a company called ArvanCloud. Many claim this company help the government of Iran in implementing the internet censorship's system (something like Great Firewall of China). In Jadi's own words, this company has made it possible for the government to turn the Internet into an intranet at any moment and block people's access to international services. Something that happens in every demonstration in Iran including right now. The reason I am writing here is to raise awareness about him, which may lead to his release. All this may be nothing more than a false hope, but it is what I can do. From the news he covered in his podcast, it could be guessed that he is one of the regular readers of Hacker News. Perhaps hearing your support here will boost his morale behind bars in Evin. The prison which is also known as Evin University due to the number of educated political prisoners [5]. [0](Persian) https://jadi.net/ [1](Persian) https://www.youtube.com/jadimirmirani [2](English) https://www.youtube.com/geekingjadi [3](Persian) https://ift.tt/xijmlD2 [4] https://ift.tt/a0SRuWO [5] https://ift.tt/nzh7RKU

Show HN: Open Source Authentication and Authorization
12 by rishabhpoddar | 0 comments on Hacker News.
I’m Rishabh and the co-founder and CTO at https://supertokens.com (YC S20). We offer open-source user authentication and we just released our user roles product for companies implementing authorization. Our users are web developers, and a prominent and adjacent pain point for our users is authorization. Developers typically implement two independent solutions for authentication and authorization. Offering AuthN and AuthZ in a single solution is something we’ve been thinking about for the last few years. Quick primer, authentication is knowing who the user is, and authorization is knowing what the user has access to. A physical analogy: A person enters a building. Authentication means reading their ID card and knowing that the person’s name is John. Authorization means knowing which floors, offices, and files John has access to. With increasing privacy and data complexity, companies like Netflix[1], Slack[2], and Airbnb[3] have built out their own complex authorization systems. To build our user roles product, we started with a first principles approach of covering authorization use cases using scripting languages such as XACML and OPA. But looking at existing solutions built by talented teams like Oso[4], Aserto[5], Cerbos[6], Strya[7], we realized that while these were powerful solutions, they were often overkill for most early to mid-stage companies (especially on the B2C side). We went back to the drawing board, reached out to our users and after dozens of conversations, we realized that most authorization needs require the ability to 1. Assign and manage roles and permissions 2. Store roles in the DB and session tokens to make it readable on the frontend and 3. Protect APIs and websites based on these roles and permissions. And so, we built user roles – a simple RBAC authorization service that focuses on the balance between simplicity and utility. It doesn’t cover many complex cases and we’re not looking to displace any of the authorization incumbents. But you can add AuthN and AuthZ using a single solution, quickly. In the near future, we’ll be launching an admin GUI where you can manage your users and their roles with a few clicks. We’d love for you to try it out and hear what additional functionality you’d like to see. What are your favorite authentication providers and what do they get right? - [1]: https://ift.tt/q0Bae9m... - [2]: https://ift.tt/2wzSKRr - [3]: https://ift.tt/YXHpEil... - [4]: https://www.osohq.com/ - [5]: https://www.aserto.com/ - [6]: https://cerbos.dev/ - [7]: https://www.styra.com/

Saturday, 31 December 2022

Friday, 30 December 2022

Thursday, 29 December 2022

Wednesday, 28 December 2022

Tuesday, 27 December 2022

Monday, 26 December 2022

Sunday, 25 December 2022

Saturday, 24 December 2022

Friday, 23 December 2022

Thursday, 22 December 2022

Wednesday, 21 December 2022

Tuesday, 20 December 2022

Monday, 19 December 2022

Sunday, 18 December 2022

Saturday, 17 December 2022

Friday, 16 December 2022

Thursday, 15 December 2022

Wednesday, 14 December 2022

Tuesday, 13 December 2022

Monday, 12 December 2022

Sunday, 11 December 2022

Saturday, 10 December 2022