Awesome List Updates on Aug 26, 2024

7 awesome lists updated today.

🏠 Home · 🔍 Search · 🔥 Feed · 📮 Subscribe · ❤️ Sponsor

1. Static Analysis

Programming Languages / Other

• vera++ ⚠️ — Vera++ is a programmable tool for verification, analysis and transformation of C++ source code.

2. Awesome Love2d

UI

• Badar 🌕 (⭐39) - Simple custom UI syntax for easy components compositions.

3. Awesome K6

Extensions

• Extension Registry - Curated listing of k6 extensions.

4. Awesome Audit Algorithms

Papers / 2023

• Privacy Auditing with One (1) Training Run - (NeurIPS - best paper) A scheme for auditing differentially private machine learning systems with a single training run.

5. Awesome Iam

Authorization / Policy models

• Service-to-service authorization: A guide to non-user principals - Discover how assigning identities to services (non-user principals) can simplify authentication, enhance security, and streamline authorization in complex distributed systems. A useful guide for IAM teams managing microservices and APIs.

Authorization / RBAC frameworks

• Athenz (⭐946) - Set of services and libraries supporting service authentication and role-based authorization for provisioning and configuration.

• Biscuit - Biscuit merge concepts from cookies, JWTs, macaroons and Open Policy Agent. “It provide a logic language based on Datalog to write authorization policies. It can store data, like JWT, or small conditions like Macaroons, but it is also able to represent more complex rules like role-based access control, delegation, hierarchies.”

• Oso (⭐3.5k) - A batteries-included library for building authorization in your application.

• Cerbos (⭐3.9k) - An authorization endpoint to write context-aware access control policies.

Authorization / ABAC frameworks

• Open Policy Agent (⭐10k) - An open-source general-purpose decision engine to create and enforce ABAC policies.

Authorization / ReBAC frameworks

• Zanzibar: Google's Consistent, Global Authorization System - Scales to trillions of access control lists and millions of authorization requests per second to support services used by billions of people. It has maintained 95th-percentile latency of less than 10 milliseconds and availability of greater than 99.999% over 3 years of production use. Other bits not in the paper. Zanzibar Academy is a site dedicated to explaining how Zanzibar works.

• SpiceDB (⭐5.8k) - An open source database system for managing security-critical application permissions inspired by Zanzibar.

• Permify (⭐5.5k) - Another open-source authorization as a service inspired by Google Zanzibar, and see how it compares to other Zanzibar-inspired tools.

• Topaz (⭐1.2k) - An open-source project which combines the policy-as-code and decision logging of OPA with a Zanzibar-modeled directory.

• Open Policy Administration Layer (⭐5.3k) - Open Source administration layer for OPA, detecting changes to both policy and policy data in realtime and pushing live updates to OPA agents. OPAL brings open-policy up to the speed needed by live applications.

Authorization / AWS policy tools

• An AWS IAM Security Tooling Reference - A comprehensive list of (maintained) tools for AWS IAM.

• Become an AWS IAM Policy Ninja - “In my nearly 5 years at Amazon, I carve out a little time each day, each week to look through the forums, customer tickets to try to find out where people are having trouble.”

• AWS IAM Roles, a tale of unnecessary complexity - The history of fast-growing AWS explains how the current scheme came to be, and how it compares to GCP's resource hierarchy.

Authorization / Other tools

• Gubernator (⭐131) - High performance rate-limiting micro-service and library.

OAuth2 & OpenID / Other tools

• How to Implement a Secure Central Authentication Service in Six Steps - Got multiple legacy systems to merge with their own login methods and accounts? Here is how to merge all that mess by the way of OIDC.

• Authgear (⭐157) - Open-source authentication-as-a-service solution. It includes the code for the server, AuthUI, the Portal, and Admin API.

Trust & Safety / User Identity

• Facebook Dangerous Individuals and Organizations List - Some groups and content are illegal in some juridictions. This is an example of a blocklist.

6. Awesome Malware Persistence

Techniques / Linux

• PANIX - Persistence Against *NIX - Features (⭐673) - List of persistence techniques.

• Linux Detection Engineering - A primer on persistence mechanisms - List of Linux persistence mechanisms.

Techniques / Cloud

• Persisting on Entra ID applications and User Managed Identities with Federated Credentials - Persist on Entra ID applications and User Managed Identities with Federated Credentials.

Detection Testing / Linux

• PANIX (⭐673) - A highly customizable Linux persistence tool. Perform various persistence techniques against Linux systems, among others Debian and RHEL.

7. Awesome Vue

Components & Libraries / Frameworks

• adminforth - Vue + Node + Tailwind admin framework. Live Demo

• Prev: Aug 27, 2024
• Next: Aug 25, 2024