Devconf.US

Jimmy Zelinskie

Jimmy Zelinskie is a software engineer and product leader with the goal of empowering the world through the democratization of software through open source development. He's currently the CPO and cofounder of authzed where he's focused on bringing hyperscaler authorization best-practices to the industry at large.

At CoreOS, he helped pioneer the cloud-native ecosystem by starting and contributing to many of its foundational open source projects. After being acquired by Red Hat, his focus shifted to the enablement and adoption of cloud-native technologies by enterprises. To this day, he continues contributing to the cloud-native ecosystem by building the future on top of these technologies and maintaining standards such as Open Container Initiative (OCI).


Session

08-14
10:40
35min
SpiceDB: open source, hyperscale authorization
Jimmy Zelinskie

As more folks deploy cloud-native architectures and technologies, store ever larger amounts of data, and build ever more complex software suites, the complexity required to correctly and securely authorize requests only becomes exponentially more difficult.

Broken authorization now tops OWASP's Top 10 Security Risks for Web Apps. Their recommendation? Adopt an ABAC or ReBAC authorization model. This talk establishes the problems with the status quo, explains the core concepts behind ReBAC, and introduces SpiceDB, a widely adopted open source system inspired by the system internally powering Google: Zanzibar.

DevOps and Automation, Security and Compliance
Metcalf Small Ballroom (capacity 100)