Indeed they are. Anything on Saturn goes for big bucks, especially ones with handmade covers. Impulse did a solid run of re-releases in the mid 70s that are much more accessible.
Top 10s are always tough, but I'll give it a shot. I have a penchant for the obscure, but if I were to consider total output, my list would be (I know I'm leaving some out)...
- Arthur Verocai (anything he arranged)
- Joyce Moreno
- Jorge Ben
- Milton Nascimento
- Edu Lobo
- Nara Leao
- Elis Regina
- Marcos Valle
- Gal Costa
- Joao Donato
And a bonus top 5 groups
- Tamba Trio
- Novos Baianos
- Azymuth
- Quarteto Em Cy
- Dom Salvador's groups (Rio 65, Salvador Trio, etc.)
For a deep dive into the obscure stuff, I used to do a podcast from my collection. Lots here to keep anyone busy.
Disclaimer: I work at ScaleFT - we offer BeyondCorp-like access controls as a service for servers (SSH & RDP) and internal web apps.
Exactly right... BeyondCorp is more of a reference architecture than a product. Google's own internal implementation is what the research papers focus on, but we're seeing more companies adopt similar models by shifting access controls to the application layer, where a request can be independently authenticated (corporate IdP) and authorized (RBAC, policies) against more dynamic conditions - such as the security posture of the user's device.
The Identity piece is a critical component to the system as the user system of record, but really just one of the inputs in a BeyondCorp-like environment.
I agree with many commenters that it appears transformative, but that's only through the lens of Google. Centralized access controls at Layer 7 through a proxy service that can authenticate and authorize requests, while brokering encrypted sessions isn't that out of reach. Our goal at ScaleFT is to offer as much as a service as we can.
Where things do get tricky, though, is with the access policies and device attestation in a BYOD environment. Admittedly, we have work to do in this regard, but it may not require a full MDM layer. Really, you only need to query device state at a given time to make an authZ decision.
Love to see BeyondCorp get more coverage, and I hope to see further adoption outside of Google.
I'm with ScaleFT, thanks for the shoutout. We've been huge believers in BeyondCorp since the first paper was released, and have incorporated the concepts into our Web Access product - https://www.scaleft.com/product/web-access
Similarly, apps are placed behind a reverse proxy, which performs authN via your company's IDP, then authZ against the policies associated with the resource. These can be basic RBAC or more device oriented decisions such as whether the client disk is encrypted.
We also believe a SaaS model is the way to make BeyondCorp a reality for companies who aren't Google, but there's more to it than a proxy service. We've found the more challenging aspects of a complete system to be the policy engine and device bindings, and have spent the past couple years working to offer with our product.
Glad to see CloudFlare talking about BeyondCorp, the more who are providing solutions in this space, the easier it will be for companies who are not Google to get there.
Wow, this is great! I've been a serious record collector for 20 years, but never got into 78s.
My eventual life goal is to do something similar with my Brazilian record collection... have the skeleton of such catalog at: https://www.novedos.com/collection.
< But as far as giving a sense of ownership and intimacy, vinyl wins
This. I've been a record collector for 20 years, mostly focused on rare Brazilian music - https://www.novedos.com.
I don't DJ anymore so it's primarily a collector thing for me. Aside from the master tapes, an original vinyl copy is as close as you can get to the original recording, which is special. I'm far from an audiophile, so it's not about the sound, it's about the feels.
Our first priority in developing our bastion product was to guarantee end-to-end privacy and verifiability, so the cleartext is not available on any bastion. We do have a roadmap item to support customers' desire for visibility into team activity, but we engineered for privacy first. Our current auditing is event-based - device enrolled, credential issued, ssh/rdp login, etc.
The point was that fundamentally the Internet is not safe, so companies will do the right things to secure their resources. So yes, in BeyondCorp this means running a proxy service that centralizes the auth workflow through policies that check the user and connecting device against the resource at the time of the request.
Very true... the "ditch your VPN" sure is a nice soundbite, but in reality it's the last thing you should be doing. I mean that literally... as in it's the last step. Better know what you're doing before getting there.
The first couple BeyondCorp papers talk a lot about how Google deployed this architecture side-by-side their traditional LAN, and slowly migrated applications over, only after closely inspecting and understanding the traffic.
But the real point they make is that Internet != safe = very much worry about security.
Great to see them continue this series, and glad that this one touches on what it takes for other companies to achieve something similar. I talk about BeyondCorp a lot as evidence that the Zero Trust model works, and that employees will love it.
The most common feedback I get is that it seems like too much of a stretch for companies that don’t operate at Google scale. That may be true if looking at the system as a whole, but the principles behind the architecture should attract anyone’s attention - remove trust from the network by authenticating and authorizing every request based on what’s known about the user and connecting device at the time of the request.
Disclaimer: I work for ScaleFT, a provider of Zero Trust access management solutions.
Great work! Tough to tell if I would _really_ like it without spending some time in use, but the one thing that really jumped out at me was the various Clip types and states. Very nice.
Happy to see BeyondCorp start to catch on. We've been champions for a while at ScaleFT. In fact, we're hosting a BeyondCorp Meetup tonight in SF. There will be a couple talks on the subject that should be of interest to folks here. It's an open event with RSVP, so come by if you're around.
My favorites are a bit later – Lanquidity (1978) and Sleeping Beauty (1979).
A good start might be the lone release on Savoy, The Futuristic Sounds of Sun Ra (1962) – China Gates is such a hypnotic jam.