Top all-time · #13471
Alex Olivier
Personal blog · alexolivier.me/postssecurityprogramming
Alex Olivier's personal blog at alexolivier.me covers security and programming. Since 2020, 5 different Hacker News readers have linked it 7 times, most often “The never-ending product requirements of user authorization”. The last post was in 2021, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link Alex Olivier's posts on deploying side projects on Google Cloud Run and on why authorization is hard. One commenter praises the authorization post as a clear summary.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Alex Olivier is co-founder and CPO of Cerbos and a co-chair of the OpenID AuthZEN Working Group. Talks, recordings and writing on authorization for apps, APIs and AI agents.
Most-linked posts?
- The never-ending product requirements of user authorization3 people · 3 mentions · first linked 2021-09-16
- Deploy your side-projects at scale for basically nothing – Google Cloud Run2 people · 2 mentions · first linked 2020-01-12
What Hacker News says?
Can't you see this article is a paid advertisement for Google Cloud? Just like those 1 hour long videos on youtube - where they show how pilots fly an airplane of a specific company and how well is al organized or a 1 hour long video of a german car factory. Just reading this line makes you suspicious: "I have built hundreds of side projects over the years " really? Hundreds? And then below: "I am yet to have a side…
Comment linking /
on “Deploy your side-projects at scale for basically nothing – Google Cloud Run”Submitted Deploy your side-projects at scale for basically nothing – Google Cloud Run as a story · 722 points
HN discussionDisclaimer: I am Product Lead @ Cerbos[0] - an open-source authorization service This article is a great summary of exactly why this area is rife for innovation and we love seeing different approaches to solve the headache of authz. Coincidentally I have just published a write up of why authorization has been so hard from a Product Management and requirements perspective. https://alexolivier.me/posts/the-never-endin…
Comment linking /posts/the-never-ending-product-requirements-of-user-authorization
on “Why Authorization Is Hard”Submitted The never-ending product requirements of user authorization as a story · 67 points
HN discussionAfter doing this sort of thing (except using mostly Ruby or Python apps) for years, then evolved to running a bunch of lightweight containerised services about 6 or so years ago and these days I mostly opt for deploying using Google Cloud Run, far less hassle, less maintenance, a significantly reduced (security) footprint and absolutely minimal cost, someone else recently wrote a good intro blogpost about their expe…
Comment linking /posts/deploy-container-stateless-cheap-google-cloud-run-serverless
on “Show HN: Bash Script to Install a Webserver and PHP on a Clean OS”Submitted Static site hosting on GCP with SSL for basically free with Cloudflare as a story · 3 points
HN discussionSubmitted The never-ending product requirements of user authorization as a story · 1 points
HN discussion
