charlieegan3's comments

On: Open Policy Agent

[charlieegan3]

I am not sure how your groups are structured, but something like this might work for this [0] use case:

    package play

    import rego.v1

    default allow := false

    allow if {
        user := input.id

        user in data.groups.A
        user in data.groups.B
        not user in data.groups.C
    }

[0] https://play.openpolicyagent.org/p/adMo9TE9bS

On: Open Policy Agent

[charlieegan3]

I detailed a comparison of OPA and Cedar with verified permissions here: https://www.styra.com/knowledge-center/opa-vs-cedar-aws-veri...

[AgentOrange1234 → charlieegan3]

Seems pretty damning. Why would someone choose Cedar? Is there some upside that isn’t captured here?

[sarahcec → AgentOrange1234]

The benefit of Cedar mainly comes down to the language. Cedar was designed to sit in the middle of a runtime call, so it has reliably low latency (see comparison here: https://twitter.com/Sarah_Cecc/status/1766141060370329748) even at high scale. It's way more readable so it's easier to author and debug. And it's validated against formal methods proofs so certain properties of the language (like default deny) are mathematically proven. More about the benefits of Cedar here: https://cedarland.blog/design/why-cedar/content.html

[i_play_stax → AgentOrange1234]

https://docs.opal.ac/

Universally, people I've met and worked with (20-30) hate writing rego (OPA).

I'm always skeptical of Styra's analysis; they are literally selling you something.

AuthZed looks interesting and they have good "ride along" videos in YouTube, e.g. replicating GitHub auth.

https://authzed.com/

[jasonjayr → AgentOrange1234]

AWS uses it and the policy language is similar, and if you are all in on AWS, then it makes sense to keep it for consistency?

[max2 → jasonjayr]

There is actually pretty vibrant and diverse Cedar community. Check out their slack.

On: Open Policy Agent

[charlieegan3]

If you’re using OPA or learning Rego, you might be interested in checking out Regal - the Rego linter.

https://docs.styra.com/regal

Disclaimer: I work on this but it’s free, & open source!

On: Ask HN: Could you share your personal blog here?

[charlieegan3]

I post my blog posts here: https://charlieegan3.com/posts (https://charlieegan3.com/posts.rss)

and my weeknotes here: https://charlieegan3.com/weeknotes (https://charlieegan3.com/weeknotes.rss)

On: Ask HN: What $500-2500 product improved your 2022

[charlieegan3]

I have the same setup and find that I can’t use my cam link through my Caldigit element hub as the video freezes. Do you connect the cam link directly to your computer? It seems the cam link needs an entire bus bandwidth to function. :(

On: MacBook owners have two months to claim up to $395...

[charlieegan3]

If you live in the UK or the EU, I think you can follow the process I went through in 2019, provided that you bought the laptop in the last N years, where N seems to change depending on which country you're in. England is 6 years, Scotland is 5.

https://charlieegan3.com/posts/2019-11-02-refunding-another-...

[Reason077 → charlieegan3]

Hmm. I'm in England and have an affected 2017 MacBook Pro 13", purchased October 2017, which already had the keyboard replaced once by Apple under the repair programme.

But I assume this process only applies if I bought the laptop directly from Apple? Since I bought it from John Lewis, I'd have to make a claim through John Lewis, right?

[charlieegan3 → Reason077]

Yeah, I believe so. I think you need to go to an Apple Authorised Service Provider and then take the fault report to John Lewis to kick off the process. Assuming that your laptop is on this list: https://support.apple.com/en-gb/keyboard-service-program-for...

[ghufran_syed → Reason077]

i don’t think that’s the issue, but the lawsuit probably only applies to US customers

[opra59 → charlieegan3]

What law exactly did you reference? After reading the blogpost I can't seem to fint it mentioned anywhere.

I have the exact same problem with my Late 2017 15" MacBook Pro. It's been repaired 3 times already.

[charlieegan3 → opra59]

I'm not sure which law it counts as exactly. Apple's own docs and were enough for me to explain to them using the correct terms: https://www.apple.com/uk/legal/statutory-warranty/uk/

[Reason077 → opra59]

I believe the main one in the UK is the Consumer Rights Act 2015:

https://www.legislation.gov.uk/ukpga/2015/15/contents/enacte...

On: MacBook owners have two months to claim up to $395...

[charlieegan3]

I went through an EU consumer law claim. I documented the process here: https://charlieegan3.com/posts/2019-11-02-refunding-another-.... I understand this is largely unchanged after Brexit.

On: Last.fm turns 20

[charlieegan3]

I have thought about this before too. last.fm is well supported by services and players. It’s often the only option when there’s no API to access now playing on the device.

On: Ask HN: What are your “scratch own itch” projects?

[charlieegan3]

I created gpxif [1] to update time and location data on image files from my camera.

With this tool I can keep the camera in UTC and use gpx data from Garmin or OwnTracks to tag photos with the correct location and offset time.

- [1] https://github.com/charlieegan3/gpxif

On: Use RSS for privacy and efficiency (2021)

[charlieegan3]

You might be able to get what you need with IFTTT or Zapier. They have email digests and support RSS triggers.