Hacker News with Generative AI: Access Control

Using your Apple device as an access card in unsupported systems (github.com/kormax)
This repository describes general status on the topic and a possible solution to allow you to use your device as an access card in UID-based access systems (without cloning, consent on behalf of maintainer will be required). In case you've already tried researching this topic, feel free to skip the Introduction section straight to The Solution.
Solving Fine Grained Authorization with Incremental Computation (feldera.com)
If you've been following the security space, you've likely noticed the rise of Fine-Grained Authorization (FGA) access control models.
Show HN: Cerbos. Open source, horizontally scalable, stateless authorization (github.com/cerbos)
Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly available APIs to make simple requests to evaluate policies and make dynamic access decisions for your application.
Google Zanzibar: Implementing the Check API and Expand API Using .NET (2023) (bytefish.de)
In the previous articles we have seen how to implement a very simplified Relationship-based Access Control using a Google Zanzibar-like data model and some SQL queries. It worked good, and I quite like what we ended up with. But it doesn't let us define an effictive ACL, because at the moment we need to materialize all relations in the database.
Beehive lab notebook: Local-first access control (inkandswitch.com)
For local-first software to be successful in many production contexts, it needs to provide similar features without relying on a central authorization server.
Unlock Articles with Paywallskip (paywallskip.com)
SSH has become our universal (Unix) external access protocol (utoronto.ca)
Hoop.dev – the only access gateway with packet manipulation (github.com/hoophq)
GitHub: Packages support for fine-grained PATs (github.com/github)
Type-Enforced Access Control with Go Generics (render.com)
Postgres Roles and Privileges (supabase.com)