rhamzeh

Joined 13 years ago

Karma
392
Submissions
101
Member since
Jun 5
Person. Does stuff. Passionate about books, Libre & Open Source software and the intersection of tech, creativity & community.

https://www.rhamzeh.com

View on Hacker News

Recent submissions

Comment · 16 days ago
> unless you choose to make data from these services available to other Google services that support personalized ads

Yeah.. And how do you not do that? What are the steps to not make the data from these services available? Is it now? How can we tell? What are the services that support personalized ads anyway? All of them?

Comment · 1 month ago
Two questions: * How many North Koreans do you know to make such a statement? And what do you personally know about North Korea? * Do you think you are living on the most free country on earth (regardless of where you live)?
Comment · 1 month ago
> "enough reason for me to move out"

And that's not a bad thing. That's why they are communicating, so if you feel that is you and you're uncomfortable about it, you can move out and it's a win win.

Not everything should service all of us, especially not the smaller services. It's OK for places to have their own rules and them being upfront about this is a *good* thing.

Comment · 1 month ago
FDroid offers the guarantee that the apk was built from source, and at least some marginal safety in terms of having passed their security and analytics/ads checkers.

You lose all that if you go directly to source.

Comment · 10 months ago
AFAIK, even if the developer removes a game from Steam, if you bought it (or rather, a license for it), it remains in your account.

E.g. I have Lord of the Rings: War in the North that is no longer available anywhere, yet I can still download install and play it on my devices through Steam (even on Linux, which it was not intended for)

That of course doesn't help if the game does not have an offline component, e.g. I also still have League of Legends in my Steam account, but that is unusable because the Riot servers don't allow updating/connecting from it.

Comment · 1 year ago
Comment · 1 year ago
Hey @idlefeature

Member of the OpenFGA team here.

TLDR: OpenFGA supports recursive nesting - you can find many examples (e.g. GDrive) of that in the sample stores repo [1] and the documentation.

For your case:

> "User C manages User B, who owns Object A."

In the model, that is represented by:

```

model

  schema 1.1
type user

  relations

    define manager: [user]
type folder

  relations

    define owner: [user]
```

So:

- Object A is owned by User B.

- User B is managed by User C.

- User C is managed by User D.

These can all be expressed as tuples:

```

- user: user:D, relation: manager, object: user:C

- user: user:C, relation: manager, object: user:B

- user: user:B, relation: owner, object: folder:A

```

> "User D should be able to view Object A, because User D manages User C, who manages User B, who owns Object A."

The model would become

``` model

  schema 1.1
type user

  relations

    define manager: [user]

    define managed_by: manager or managed_by from manager
type folder

  relations

    define owner: [user]

    define can_view: owner or managed_by from owner
```

Notice how on the folder, you cannot say `manager from manager from owner`, but you can model your way around it by adding the `managed_by` relation on the user.

You can play with this sample on the FGA Playground here [2] (give it any name to continue, note that this is publicly viewable/editable). Your use-case is similar to the expenses sample [3]

Another option the docs is warning you of is that in order to use a relation as the base of a `from`, it MUST be just a directly assigned type, for example the below is not allowed as owner has redirects (or manager from owner), so cannot be used as the base of a recursive from

```

type folder

  relations

    define owner: [user] or manager from owner

    define can_view: owner or manager from owner
```

but as you saw above, you can work around it with modeling slightly differently to reach the desired solution

In case it is easier for you, feel free to ask on our Discussions page or CNCF channel [4] as they render markdown a bit better than here on hn.

As for other AuthZ frameworks that support recursion, most of the Zanzibar[5][6] inspired ones (like what OpenFGA is) do, in fact it's one of the strong suits of a Zanzibar inspired approach to AuthZ.

[1] https://github.com/openfga/sample-stores/tree/main/stores

[2] https://play.fga.dev/stores/create/?id=01JNPQKC4TMHBW271V6N4...

[3] https://github.com/openfga/sample-stores/tree/main/stores/ex...

[4] https://openfga.dev/community

[5] Zanzibar is a Google paper from 2019 around how Google handles authorization for their products: https://research.google/pubs/zanzibar-googles-consistent-glo...

[6] https://zanzibar.academy/

Comment · 1 year ago
For audiobooks, instead of pirating I would recommend https://libro.fm - you can buy them DRM free and they donate part of the proceeds to your library of choice.
Comment · 2 years ago
Firefox has been doing that for a long while too. It recommends going to the already open tab but you can ignore that and open a nee tab anyway if you wish.
Comment · 3 years ago
Comment · 3 years ago
Non-Americans should not, and usually do not believe either. It's funny when Republicans/Democrats treat either as reputable.

They're politicking 101 made into 24/7 news media panic.

They're both charlatans and peddlers of lies and cheap tricks; they engage in propaganda and employ journalists who seem to believe that they're anything other than foot soldiers to stir up the masses against XYZ.

Everyone knows Fox News is trash, it's laughable when some continue to argue that CNN isn't.

Where XYZ can be anything, depending on which way the wind is blowing, sometimes it's each other, sometimes it's internal to the US, sometimes it's external

Comment · 3 years ago
I mean, to follow that analogy, yeah people absolutely should abandon their families if the families are out there actively murdering innocents.

The person saying that they're only staying to murder with their families because they care about them is not a redeeming quality, and they should definitely be held accountable and not excused for their crimes.

For the record, I consider any armed person outside their home country should be considered as a terrorist and a militia and treated as such. There is no reason someone from country A should be carrying a weapon in country B and attacking people there. This is 100 times even more valid when country B has not authorized this.

Comment · 3 years ago
Yes, just as much as airlines are an arm of the US government:

> U.S. airlines avoided broad bankruptcies and cuts with the record $74 billion in government Covid-19 aid (https://skift.com/2021/07/29/federal-aid-saved-u-s-airlines-...)

Or the US semiconductor industry > Most of the money is going into industry and supporting industry investments. Of the $52.7 billion in subsidies, the bulk of that will end up going to private companies. (https://www.scientificamerican.com/article/nearly-53-billion...)

Of course there's more examples for almost any country.

I'm not debating your conclusion. I think it is spot on. I am calling out the tone though as if this was not the norm for all the mega corps/mega industries.

Comment · 3 years ago
I can't believe I'm on the side of Facebook on this one.

The problem is "nations" don't represent the people in those nations, and those in power are just as capable as big tech in to relying on scare tactics and duplicitous messaging and misleading the populace in order to push forward their own agendas.

Fighting encryption has nothing to do with "saving the children", no more than all the misguided disastrous crusades against one thing or another over the past 50 years have been about saving the children.

I come from a place where in the 2000s the religious institutions through a hissy fit about certain music and subcultures and how they must be suppressed in order to "save the children". Fighting encryption may not be religious in nature but is born out of the same need for power and control.

Comment · 3 years ago
Thanks for that! Probably in a couple of years, as my laptop is still serving me well enough for now. It's also pretty light and still has good battery, so not a ton of benefit there.

If the battery life was doubled (~8+ hours), that definitely would be more intriguing.

But ouch, hadn't had WiFi or sound issues on Linux since the 2009~2010 era, will not be fun to get back to that, though hopefully in a few years as the drivers mature, this would become less of an issue.

> On the most annoying side, I don't know if there is a way to configure the lid action, as it put the laptop on standby.

Even when an external display is connected? That's got to be annoying!

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton