Tootfinder

Opt-in global Mastodon full text search. Join the index!

@trochee@dair-community.social
2026-07-12 02:16:32

I see a token famine coming
Centrally planned economies with track records of shooting or rusticating the bearer of bad news (like Stalinist Russia, Maoist China, or Zuckerbergian Menlo Park) are always going to have surprise! resource shortages

@frankel@mastodon.top
2026-08-09 16:54:35

Guest author Peter Firmstone continues his brilliant series of #Security baked into the #JVM, with his third post: two Subjects, one call
This part covers the two kinds of identity a call carries, how SPIFFE manages process credentials without keystores, and how three identity layers coexist on a singl…

Security Baked Into the JVM: two Subjects, one call
The constraint system stops a bad call before it leaves the JVM. The Safe Codebase Audit Pipeline stops bad code before a client ever loads it. What remains is identity: who is calling, and can you verify it? Most frameworks answer with a token check at the door. A filter validates a bearer token, sets a thread-local variable, and hopes that nothing downstream forgets to look at it. DirtyChai answers differently.