For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | more ambentzen's commentsregister

I was left with the somewhat opposite feeling. I still don’t know what OPA actually is or does. It has a nice paragraph describing it without saying anything at all.


OPA solves the problem of defining and enforcing policies across a system. Some examples:

- How do I enforce that inbound API requests come only from trusted sources?

- How do I enforce fine-grained access to user records?

- How do I enforce a set of naming conventions for a data update?

Many such policies may come from regulatory requirements, may be regional in nature, and may change in otherwise stable codebases. And it's even harder when you're applying this to a highly-scalable production internet service. As a result, defining policy at an organizational level with auditing is a challenge for large enterprises. OPA helps enterprises administer and enforce policies.

More details on what OPA does here: https://www.openpolicyagent.org/docs/philosophy

And you can see some examples of Rego (the policy language) here: https://play.openpolicyagent.org


That's still not saying what it is, though. Is it a thing you put in front of your backend to allow/deny requests? Is it an endpoint something like nginx calls with an auth token and the http verb and url that responds with 200/403 that nginx can react to? Is it a library you embed in your application? Is it an agentic AI?

It's as though you're describing a car to someone who's never seen a car before by listing all the places you can go in a car.


Fundamentally it's a programming language so all the normal ways of running it apply:

Use their library in your application to evaluate policies.

Run it from the cli.

Embed it in some service like nginx.

The language itself is pretty focused on some prolog-ish describing of what constitutes an allow/deny decision.


I guess I’m familiar with the general concept/domain it’s in. I haven’t used it myself, but having it spelled out was enough base knowledge for me to grab on to.

Looking again, I see your point. If you don’t know what it is having the acronym spelled out doesn’t help much at all.

Still it clears the low bar provided by those announcements that just say something like:

“BEOTZ’s developers are joining Flmp.io. As well all know BEOTZ is popular and Flmp.io is a top provider to enterprises. We look forward to exciting things coming soon.”


The nice things about such an obituary is that it isn't a person so we don't have to feel bad and we don't need to know what it was going to do.


How would law abiding citizen Joe Random from Nowhere even know where to offload that on the black market?

It's a bit like internet piracy, make it easy and convenient to follow the law and most people will do it.


>How would law abiding citizen Joe Random from Nowhere even know where to offload that on the black market?

Considering the state of copper theft, the large number of videos on facebook and youtube describing how to melt metals into bar stock, and the low cost of the tools I dont know why this would be considered specialist knowledge.

Maybe if they needed aqua regia or something.


It isn't that easy. Anyone paying money for a homemade bar will test it first. The ancient gold will be very impure by bullion standards. The fact that it was horde gold will be found out very quickly.


>Anyone paying money for a homemade bar will test it first.

There's a pretty lively market in gold on ebay. Often forged into bars or coins by end users.

I have personally dealt with retail gold buyers who legally clear gold of all sorts with little question. They pay based on purity and likely have a price for whatever purity the horde gold is smelted at.

There's also that Singapore Gold Port at the Singapore Airport. Even if they wont touch you directly, there are IIRC, in person trades in the airport which can then be deposited straight into storage.


This comment reminds me of discussion when weed gets legalized in the states.

There's always people going, "psh, this won't make weed any more accessible, it's already so easy to get, anybody can do it!"

And yet, nevertheless, inevitably there are people who try it only because it's now legal and openly sold in stores. A lot of people simply don't want to do things they consider shady, no matter how easy it is. Maybe it being legalized doesn't make it any more accessible to you, but you aren't everyone.


I see where you are coming from but not quite.

What I am saying is that the process is already legal and available, so the process isn't a barrier to melting and selling the gold. I don't take a position on whether someone would simply not do it because its illegal.

The process of growing and selling weed was illegal, and thus also a barrier to accessing weed.

If anything your line of reasoning makes me want to legalise and protect melting gold you find and selling it.


You'd be surprised of how easy it is for "Joe Random from Nowhere" to sell their illegaly sourced priceless artefacts. See: https://en.wikipedia.org/wiki/Lava_Treasure


Can't say I've tried, but I think it's pretty easy to find buyers for gold.

Melting it removes the legal risk.


Melting it removes _a_ legal risk. I'm sure if someone looks they can find a risk or two still there somewhere.


> I've noticed recently that the JavaScript debugger in Firefox can "un-Webpack" (and in some cases un-minify, if I've read the inputs and outputs correctly) the code behind many sites. It's certainly not as approachable as declarative HTML, but I suspect to some enterprising person, that route is still open.

That's just sourcemaps I think. Pretty standard stuff, but the site have to provide the maps.


I did that in 8th grade across 3 schools that shared a network. Got my laptop privileges revoked for a few months.

It was just a batch script where I had copy/pasted the same line over and over again, no fancy loops.


> Society has to find a way to promote traditional lifestyles Why?

If those lifestyles are so superior why do they need promotion? It's almost like people are not some homogenous blob, but individuals with their own wants and desires.


To be devils advocate here we also have to promote healthy eating, getting screened for cancer, or smoking PSAs. Just because something might be classified as "superior" doesn't mean that it will always self promote or be accessible.


Further, if we engage with the likely meaning here, I would also pose the question: why do we need to promote a “lifestyle” at all.

If being straight is an inherent trait that isn’t a choice, surely promotion is pointless. If it is a choice then the question still stands. If sexual orientation is chosen, what difference would it make what someone chooses in the first place? They have a right to determine that for themselves.

But of course sexual orientation isn’t a choice, so promoting heterosexuality seems like it would be little more than a “the majority of us exist!” marketing campaign. Which seems bizarre to me.


> I've plastered a copyright notice at the top of the source - as I've always done...

Do people actually still do this?


> Taxable benefit would occur if Microsoft bought software of others and gifted it to employee. Or if Microsoft could not reasonably expect people to actually test the software, or allowed them to resell it.

Isn't that exactly what they did?


I don't know about GP, but personally I already have a music streaming subscription so I don't want to pay for yet another one.

Come to think of it, I think I have 2 ATM; Apple Music through my Apple One thing, and through my ISP.


You forgot the second part of that post: "I think that's what he wants but doesn't know how to go about it". Which is, to me, clearly another jab at the critic, as if Ben is just trying get followers.


Hetzner does marketing. A German tech youtuber I follow does in-video spots for them.


Yes, a few years back there was another german youtuber who also had some promo ad for hetzner. Though the amount of ads is pretty limited compared to others like Linode.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You