#ocaps — Public Fediverse posts

New post from me over on the @spritely blog: Composing capability security and conflict-free replicated data types

Local-first apps often use CRDTs, but I'm not really aware of any that fully embrace capability security. This post is an attempt to show how the two can be composed using a simple group chat application as a case study.

https://spritely.institute/news/composing-capability-security-and-conflict-free-replicated-data-types.html

#spritely #localfirst #ocaps

@dthompson "using predicates to guard..." reminds me of the way monte tuned the rpython jit using guards

https://monte.readthedocs.io/en/latest/guards.html

#ocaps #plt

Do we care enough to use capability-based #security for yet?

Every plugin system deserves robust composition. #ocaps

https://old.reddit.com/r/comfyui/comments/1dbls5n/psa_if_youve_used_the_comfyui_llmvision_node_from/

New ForgeFed #Blog post:

Stabilizing the Object Capability System

https://forgefed.org/blog/stabilizing-ocaps/

Where to comment: Right here on the Fediverse :)

--pere

#forge #ocaps #activitypub #forgefed #federation #haskell #fediverse #decentralization #development

New Spritely blog post about our experience writing Fantasary for the Lisp Game Jam: https://spritely.institute/news/lisp-game-jam---fantasary---prototyping-an-object-world--tcp-netlayer.html #lisp #scheme #gamedev #gamejam #ocaps

New ForgeFed blog post: Vervis actor refactoring

https://forgefed.org/blog/vervis-actor-refactoring/

Where to comment: Here on the Fediverse :)

#activitypub #ocaps #haskell #development

--pere

The #Sandstorm project is excited to finally join the fediverse!

We're a secure computing platform for one-click deployment of open source web apps. We're also an innovative way of building apps based on object capabilities (#ocaps)!

We've selected floss.social because we love the vibe of the community growing here. Our friends at @forgejo are also here which is a great bonus.

Follow us for project updates and get the latest and greatest news on the growth of our community! #introduction

@aral @cancel there's some recognition and of a possible solution to this problem using #objectCapabilities #ocaps #ocappub
https://gitlab.com/spritely/ocappub/blob/master/README.org

talking to @adz about the future of #fediverse security and #ocaps at #transmediale

During #ActivityPubConf #apconf : What are the downsides of #ocaps ?
@cwebber : Well, they can be delegated really easily (but so can ACLs by proxy so ACLs are misleading)

me (in my head) : noooo, ACLs are difficult to delegate in practice and that's what counts. BUT ocaps can also be made difficult to delegate by requiring each action to be signed using a key that is also used for other things !

During #ActivityPubConf #apconf : What are the downsides of #ocaps ?
@cwebber : Well, they can be delegated really easily (but so can ACLs by proxy so ACLs are misleading)

me (in my head) : noooo, ACLs are difficult to delegate in practice and that's what counts. BUT ocaps can also be made difficult to delegate by requiring each action to be signed using a key that is also used for other things !