Dibs is headed out to trick-or-treat as a Sandworm this year. Happy Halloween!

What do you think will top the @owasp.org Top Ten list this year?

Using a combination of data from past CVEs, industry trends (hint: AI), and some good ol' vibes, here's a prediction for the updated list that's expected later this year.

youtu.be/YA-F4qnavE8?...

Fun moment from yesterday's stream was when the Reactions ̶b̶u̶g̶ feature on MacOS repeatedly flashed the 👎 at inopportune moments lol

We were at @cnsmunich.bsky.social this past week talking about how Google Zanzibar works

Covered in this talk:

* Why ReBAC is cool
* What the Zanzibar Model, Language and API looks like
* How it achieves low latency and consistency

Watch the entire talk here:
www.youtube.com/watch?v=mHDB...

Friends don't let friends write custom authorization code.

Here's why:

🧠 Code Is Debt
🧍Authorization Is a Human Problem
⚙️ AuthZ Must Perform at Scale

Learn more here:

dev.to/sohan26/frie...

Today we launched Authorization Infrastructure for AI - with official support for RAG & Agentic AI.

AI needs robust access control. Else it can leak data, cross tenant lines, or act out of bounds.

Read how you can build scalable, cloud-native AuthZ for AI with SpiceDB:

authzed.com/blog/authzed...

How does Google Zanzibar  prevent 500,000 internal RPCs per second from hitting the database?

The magic lies in how Zanzibar handles hotspots. Here's a deep-dive video into the techniques used to achieve this.

www.youtube.com/watch?v=8sgk...

Have you written a line of code that looks like this?

Then you're probably doing Authorization wrong.

Our latest video explores why this is the case - from the lens of technical debt, people, and also performance at scale.

We discuss this here:
www.youtube.com/watch?v=qGtG...

Photos from a whirlwind Day 2 and 3 of Kubecon! We co-hosted a great party, had a lovely chat with Techstrong.IT and also met with hundreds of Kubecon attendees

#Kubecon

Some photos from AuthZed @ Kubecon Day 1

Come over to Booth N632 and say hi (we've got some cool swag to give out)

We had a ton of fun setting up on #Kubecon Day 0. Highlights included:

- Riding the Cloud Cable Car to the venue (appropriate name)
- unpacking ALL THE SWAG
- Setting up the AuthZed booth

Look forward to seeing y'all at the conference tomorrow. We're at Booth N632. Come by and say hi!

Who's going to be at Kubecon London next week? ✋

Come by our booth N632 and meet the newest contributor to SpiceDB - Dibs.

Muad'dib, or Dibs for short, is a desert mouse from the Dune series that's known for its resilience and adaptability—qualities we strive to incorporate into SpiceDB.

#NewCoverPic 😎

The New Enemy Problem Explained!

This is a where unauthorized access can occur when changes to permissions and the resources they protect are not updated together consistently.

Here's a post that describes the problem, and strategies to mitigate it, with examples

dev.to/sohan26/bewa...

We're talking about Expiring Relationships on SpiceDB

Yes, we fully get the irony of doing this just before Valentine's Day

Join here: www.youtube.com/live/u39_Yj_...

Are you at #DeveloperWeek? Come talk shop with Sam and Blaine at Booth #707! Find out more about the world of permissions systems and how we aim to fix broken access control everywhere! #DevWeek2025

Back to school in January!

For our first livestream of the year, we'll do a round of "Explain Like I'm 10" for Authorization concepts

We also have some pop quizzes prepared for you but there's no detention so you have no excuse to miss this.

youtube.com/live/2GUPMzD...

AuthZed is heading to re:Invent and we're hosting a party! Join us Wed night 12/4 for an evening of networking and conversations about current trends in authorization and data infra in a laid-back atmosphere. Details: lu.ma/adckx46q