skysight-inc/HackerNews huggingface dataset:
I've written here on HN before that it should be a device that is issued that has the private key, but that private key is also hashed with a pin and some piece of biometric data. The pin itself would be changeable (forced every 90 days, at will anytime). The device would have a keypad.

You would go down to some place (govt office) to get the device (card?). They would take the device, pop it in a reader/writer, and the device would ask you for a key and your biometric data (maybe a fingerprint?). The device would have on it a keypad and fingerprint reader (or whatever). Once you typed in your pin and scanned your fingerprint, it would generate a private key, hash all three together and store it in the card. This key would be "permanent" to the card (if you lose the card, you have to get another). The key wouldn't be saved anywhere (not in a govt database, etc). And it couldn't be retrieved from the card.

To prove your identity, you would slot the card into a reader, swipe your fingerprint, type in your pin. If your pin and fingerprint plus key on card hashed matches the stored hash - then you are identified and the card outputs a "true" value to the reader. Otherwise, it outputs a "false" value indicating no match.

Multi-factor auth - something you have (the card), something you know (the pin), something you are (the fingerprint/biometric).

That's the basic gist or blueprint - essentially an ID card that can't have it's id read (not easily at least - I imagine that you could read it with proper decapping and electron microscopy), with a built in keypad and biometric read sensor in one unit. Anywhere you need to do a transaction to prove yourself, you need to use a reader (even online - so as a part of you getting your card, you would get a reader too).

There's probably a ton in the scheme that I am missing or have wrong, but I think the basic idea is there, and I think it is possible to do with today's technology. The idea is that just having the card alone isn't enough. Just having the id number/key isn't enough. You need all three pieces for it to work.

It isn't "rubber hose" proof - but then again, not much is or can be.
Im not sure what Blue card means. Do you mean PR? If so that's basically citizenship. I'm talking about all the people who are there for work.
The fundamental problem is that we use the wrong tool to solve the problem of academic publication:

We use the free market, which limits distribution to those who can pay the most in order to maximize profit - that's how the tool is intended to work. That's great for some things, such as laptops, but it works against the mission of scientific research, for which the mission is to advance knowledge, advance the world, and solve important problems.

Unfortunately, our society now dogmatically applies the free market hammer to almost every problem, nail, screw, wheel, or fragile crystal vase. If only Einstein had thought of it - how much could he have sold the theories of special and general relativity for? How much could Watson and Crick cashed in for? Tim Berrners-Lee?
the downmodding seems a tad unfair, given that the article also made a reference to size being an advantage:

> Singapore is also very small, and the population may be healthier in general than in some other countries. It’s a little easier to run a health care system like that.

but what I don't get is why so many people will simply say this without any further evidence that this is true.

if size is a benefit, will a country with a population of 1 have an extremely efficient healthcare system? how about a country with a population of 10? obviously no. But does it get better at 1m people? 10m? 100m? I think the size of the US is a red herring, and there are so many other reasons why the US doesn't work, like the way the healthcare economy is structured, social contribution, population sprawl, etc that size offers no economies of scale advantage and in fact works against it. Under the right conditions, being larger really should help a healthcare system, not hurt it.
Sounds like a great way to get your email marked as spam.
This can be done easily if you own a domain and use a service that lets you specify a catch-all address. I do this with my own domain and G Suite. Then, you don't even need to do any preparation before giving out the address.

It does sound weird to the person writing it down and I've had more than one person say something like "well, if you're just going to give me a fake address, then don't bother" before I explained myself.

One other down side is that it is not as easy to reply to mail as the other, generated identity (in gsuite, you need to create a new account in the domain to write as that username and also maybe jump through a hoop or two). Replying casually can often reveal your main identity, which is often the one you are trying to strongly protect.
I moved away from it.

Today I have a Java system which composes bash scripts out of fragments and puts them in the cloud-init data for virtual machines. The machine does whatever it is going to do, then it drops a message to a message queue to say it is done and trigger a pleasant chime if successful, otherwise a painful scream if failed. The Java program automatically downloads the cloud-init logs and can usually point out where the failure happened if there was a failure.
Also maybe "Our marketing folks want all the angry links to point to a separate domain we don't care aboout vs. our main web site"
int x;

String str;
It's a standard pacemaker. There's the device itself and then the wires to go to the heart. Any surgeon with half a brain should know you don't go anywhere close to an MRI with that. And for all of his misguided advice that could've threatened my life, I still had to pay him of course. He never did any research or checking on my particular model to even see if there was a danger or not. Turns out, the danger is extreme.
I imagine that if it's not the type of audit required by the government then it's a liability. You can plausibly deny something you never audited.
> The only way to solve ... top down ... mandate ... everyone is forced

Or you could think carefully through the incentive structure of the scientific publishing system to see if there are places where small tweaks could go a long way. This is a system that emerged over centuries, and using your top-down hammer may change it in the short-run, but it will invariably morph into something unintended and unexpected if the proper incentives are not in place to guarantee long-term success. And I don't think those incentives should be another dose of your hammer.

The landscape includes many parties: researchers who produce papers, journals that publish papers, consumers who read papers, institutions that pay for journals, institutions that fund research, and institutions that employ researchers. There are probably more. All of them have different costs, preferences, and incentives. Disentangling that web may yield some very good opportunities for improvement, either as policy, advocacy, or entrepreneurship.

Don't get me wrong for a second: I'm not defending the copyright lobby and its obscene partnership with the state.
My father is a doctor. He is in his 70s and works 60 hour weeks at the Native American reservation clinic that he started working at after he retired and built his dream home out in the middle of nowhere. He claims that a 60 hour work week is retirement for a doctor. He certainly doesn't need the money, but says he will continue showing up at the clinic till he dies.
The thing is, it has to work completely offline. Not everyone uses computers.
There is no FullHD one. That came on the T440s, maybe the T440.
Which part isn't plausible? There's plenty of evidence that competitors are biased in various ways. For tech startups, customers and investors are rarely aware of the racial mix of employees, unless maybe they're in the news for not being diverse enough.
Run it like TLS certs where you can have multiple sub keys, one for each company/entity you want. Revoke as needed so they can't trash your credit.
You're absolutely right about the performance.

The good thing about going to the T430 is because it has the later Intel Ivy Bridge (as opposed to the Sandy Bridge) processors. The Ivy Bridge / newer chip sets brought USB 3.0 with them. Even the i5 version of the T430 has two USB 3.0 ports.
Homeless people have SSNs, too, and likely aren't carrying around wallets.
It's kind of a ridiculous statement. A counting error is nowhere near is shocking as the initial breach, especially considering it happened after the breach.
This is shamefully terrible leadership. If you're the CEO and a subordinate fucks up, it means you fucked up. At the end of the day the performance of the entire company is your responsibility.
Ducksay
The article touches on this:

"But when hospitals competed, they did so by... paying more for doctors..."

"Singapore heavily regulates the number of physicians, and it has some control over salaries as well."

What makes price controls for doctors wages different than failures with price controls in other industries?
Better yet if you have Apple wallet set up on your phone, and visit: https://stripe.com/elements/examples, you'll see that you have the option to to pay via Apple Pay. Which is powered by their Payment request element: https://stripe.com/docs/elements/payment-request-button
Maybe me. ;-) I've been suggesting it for a while. It works wonders and has worked every time I've tried it.

It seems likely that they know about this backdoor and have opted to allow it. They must surely know the IO addresses associated with archive.is and have yet to make any effort to block then.
I didn't follow the leap from undocumented workers reusing SSNs to applying for a lease.
The headline doesn't mention "dollars" at all.
A dead sibling post mentioned tomatoes. It is apparently supported by some research but seems to be not conclusive. https://www.ncbi.nlm.nih.gov/pubmed/23883692
Norway and Sweden, both countries which tend to get pretty cold in the winter, have life expectancies around 82 (a little higher than the US). Northern Europe in general, really; life expectancies are generally similar to the US or a bit higher, and it’s not particularly common to migrate to warmer countries for retirement.

Actually, my impression was that extreme heatwaves in hot places tend to kill more elderly people than extreme cold in cold ones.
In the UK there is no such thing as an SSN, only "national insurance numbers" which are used for transactional purposes with the government, but are otherwise not part of daily life.

Society seems to function just fine. It's totally not necessarily to give each person an identifier.
The Supreme Court already heard this issue in the mid 2000s and found the FCC could regulate ISPs as title 1. They could reconsider, but I doubt they will.
Intel had an ARM chip division for Phone CPUs called XScale from 2002 to 2006 when they sold it to Marvell to focus on the more profitable x86 series.[1] He may have believed the x86 Atom chips could replace the XScale.

Xscale was widely used in Palm Treo's, Sony Clie's most Compaq Poquet PC's and the original Amazon Kindle.

His "biggest regret" comment is pure rewriting of history.

He made the wrong decision to get out of phone CPUs.

This is probably one of the biggest blunders in Intel's history.

[1]https://en.wikipedia.org/wiki/XScale
JuryMatic | Part time Remote

SF-based legal tech startup seeking a new dev lead for ongoing part time work. Good candidate for a full time freelancer or dev looking for a side hustle.

Stack: Django, Celery, RabbitMQ, Postgre, Bootstrap, Websockets

Platforms: Heroku, AWS, Azure, DO

Languages: Mostly Python and JS. C#/.NET is a plus.

Must have solid experience leading dev on product with the same or similar stack.

We'd strongly prefer someone who can occasionally do a few hours of scheduled daytime on-call following significant new feature releases. Otherwise all work is on your own time.

Email info@jurymatic.com
Uber board approves governance changes and to move forward with SoftBank sale
Agreed on #2. Quarterly meetings with CEO about security don't seem so bad in the general case (although in Equifax's case, security is a way bigger deal), but that shouldn't be all. Only 1 person knew about the patch? Even a medium-size enterprise where security is even a moderate concern should have more people than that focused on security 100% of the time.
Well, for a start it’s really the sort of thing that probably shouldn’t be done by the private sector. In the system described, the private operator is essentially incentivised to abuse the person they’re supposed to be taking care of.
> I'm just trying to find some schematics at the moment, it sounds like they used vacuum tubes.

Yes - vacuum tubes and relays, cds cells (or maybe selenium cells). Transistors would have been very expensive and fragile, if even available.

Here are some links that may help you:

http://cyberneticzoo.com/category/cyberneticanimals/grey-wal...

http://www.roboticsportal.it/wp-content/uploads/2014/01/Spec...

http://4.bp.blogspot.com/-exHhj_kM47Y/VVknwK5WPsI/AAAAAAAAA5...
For me Nobel prices in Science are one of the things that work better the way they are that most alternatives.

Nobel prices in peace are ridiculous. Not talking about (fake) Nobel prices of Economy that do not exist but have managed to buy themselves some recognition because the money printing of central bankers.

For me this article is absurd. If you have a better way of giving to science, create your own price with your own money.
You missed "Sell your stock"
this is the problem. OWN YOUR SHIT.
#LASVEGAS :( How to Handle Your Emotional Reactions to Tragedy and Disaster
> I wish I could have 72 hours to review the front of all my snail mail electronically

https://www.google.com/search?q=postal+mail+virtual

> The post office would still get money/postage,

The post office can't take money from a customer and then fail to provide the service because someone else told them to. That would be fraid.
How does this work when you move states? Just the same kind of procedure as when you get your new Drivers License?
Stripe is really, really good at marketing to developers. I have to imagine it’s earned them a lot of business.

To the extent that devs are involved in vendor selection, I have to imagine that a large majority of them suggest Stripe to their CFOs or whoever ultimately decides.
Equifax is waiving the fee since the recent incident.
I agree with parts of the article, that big breakthroughs are rarely these days individual efforts, and that praising only the ones at the top is misleading and potentially damaging; however, as a member of the LIGO collaboration, I think these three guys really do deserve credit for what they've driven over the past 50 (!) years, and all of the work we've been able to do over the years has only been enabled by their drive. While choosing three from thousands is never fair, it's probably more fair than distributing the award equally among anyone who's ever played a part in gravitational wave science.

The recipients have been at pains to make the collaborative effort clear. One of the first things Rai Weiss (winner this year) said on the phone to the Nobel press conference today was that he saw this as an award for the 1000+ scientists in the (LIGO) collaboration. When a special Breakthrough Prize was awarded to all of us last year, with large prize money being given to Rai, Kip and Ron Drever (who died earlier this year and who otherwise might have been one of the three Nobel laureates today), Rai and other senior scientists spent the money funding grad students and other science activities [1]. They have given ample credit to the people that helped in their success, and they've shared their knowledge and resources with the newer generations.

Today, we're celebrating this as a recognition foremost for the three new Nobel laureates, but also to the other pioneers who didn't make the "final three", the diverse collaboration of scientists past and present who've been involved around the world in gravitational wave physics, and all the technicians and students that did the grunt work building the machines and lab experiments. While our names aren't all stamped on the medals, I for one am deeply satisfied to have played some (tiny) part in it all alongside these greats.

[1] http://www.ligo.org/magazine/LIGO-magazine-issue-11.pdf#page...
How to Deploy Phoenix Applications to Google Cloud Platform Using Nanobox
Yup, in an attempt to avoid falling into Facebook's echo chamber I have created a news feed that is funnily enough just my posts. At least this means I don't have any incentive to look at my news feed anymore.
Hi, member of CMS collaboration here. The author list is ordered: by country name (in English), by town name, by institute name, by author name, by author first name. So, as of this writing, the list starts with authors from Armenia.
Most probably their marketing and legal team came up with the idea. Once the outcry blows over turn off the site and all incoming external links become dead. After a while general public will not remember and wouldn’t associate their main site with this incident through search. Legal might have encouraged to have two fully independent sites. I will not be surprised two sites belong to two separate legal entities. Just a speculation on my part considering how US corporate behave.
This isn't really answering the question though, is it?

On the basis of language, Go is a regressive and under-performant pile that people seem to love largely because of its nostalgia factor.

What about this framework helps to offset how awful Go is?
> That would put an end to banks and such trying to use them as a way to verify identity.

Obviously it should so - but obviously, they shouldn't be using them in the first place. Doesn't seem like it would stop anyone - possibly for regulated entities like banks, maybe - but even then, they'd probably have to be dragged, kicking & screaming.
I would have given it to Kennedy and Khrushchev for avoiding nuclear war during the Cuban Missile Crisis.
Mine doesn't.

Source: I work there.
Ah right. Just realized I read your original post wrong. I read it as saying the orthopedic surgeon implanted metal in your body. There isn't much they'd implant that isn't MRI safe.
Personal anecdote:

My Singaporean Uncle got stage IV nose-cancer two years ago. He has two kids, a stay-at-home wife and a job that pays only middle income. After a year of constant, weekly treatment by an assortment of doctors, he went into remission and paid in total less than one thousand dollars.

My Singaporean ex-girlfriend had systemic organ issues over her life, that have alternately caused her seizures and blackouts. She was hospitalized for years at a time. Again, middle income family, with three kids and a stay-at-home-wife. Her family paid virtually nothing for 15+ years of treatment, and then the government paid for her university. Full-ride. Oh and they also paid her directly to attend classes. About S$1500 per semester, last time I checked.

I have so many other great stories about my mother's country.

For now, my sentiment is that Singapore's society, government and people, on balance, cares about each other. Not a power-hungry "all glory to the nation" care, or a brainless "let's give everyone everything for free" care, but a "these people are people like you and I. If I put on their shoes, how would I like to be treated?" care.

In the United States, that basic, human empathy is in question.
The CEO is right that it boils down to being one person's fault. He should know since he sees him every day in the mirror.
Not even implicitly?
I, of course, should’ve said “no other city in a first-world country”, but if you think that Mumbai is a fine goal for Californians to aspire to, so be it.
The thrust of your comment already exists: it’s called a driver’s license or state ID for those who do not drive. The problem is identifying an American, not a resident of Massachusetts or Kansas. Comcast operates everywhere. State Farm operates everywhere. They want socials to identify you no matter where you live (for a number of reasons). How do you tie a Michigan license to a Nevada license to identify you? It’s intractable and already fails for the cases where it is used.

You’d be asking businesses to get set up with every single state and territory for the purposes of identity management, and giving fraudulent folks fifty-four opportunities to defraud national businesses rather than N social security numbers. I can do the OMB analysis on your bill: 54x growth in consulting fees, billions in lost productivity forcing every system to switch to a new fifty-four jurisdiction unique identifier, etc. etc.

Ideal would be a number that fits in the same space as an SSN but can be rotated. This limits significant changes to national company systems, but means you only have a billion not-so-secure numbers to play with, so you’d have to strongly disincentivize rotations to about 2 or 3 per lifetime modulo American death rate. If we are going to disrupt extensively, let’s focus on one American system rather than fifty-four systems for no net benefit; if state-level identification was useful for this purpose, we would already be using the ones we have. We don’t.
What does private companies' compensation plans have to do with the government or Republicans?
Does that mean that your ID number (social security for U.S. readers) is taxable upon receipt (birth or immigration)? Also we will need a birthday tax as your age (a key demographic data point) changes then. A marriage tax, moving (address change) tax, employment change tax etc. Tax law will have a concept of taxable data event much like a liquidity event.

Obviously this is a silly thought exercise but it is fun to think about.
She isn't active now, but up until a few years ago, she was the primary caregiver for my father, who had Alzheimer's. It kept her busy. She also spent a lot of time on fixing healthy food.
Fuck US copyright laws. This is a case where disobedience is a moral necessity while society weeds out the parasites that maintain that situation.
There is also an IT version called The Phoenix Project. Same story, but in a computer biz.
Yes, him. Guess what, you are (were) the CEO and you are legally required to be responsible for what your public company does. Blaming anyone else is what terrible CEOs do.
Stripe has dropped its key advantage.

It started out with outstanding software support for the most popular platforms but now it doesn't.

Develop an application in ReactJs? Stripe hand wave: ahh go build your own solution or use some third party thing somewhere over there in "the community, sure you can trust it".....whatever, we're busy, and ReactJs, hmmm haven't heard of that.
> Second, Smith blamed a scanning system used to spot this sort of oversight that did not identify the customer-dispute portal as vulnerable. Smith said forensic investigators are still looking into why the scanner failed.

Do these scanners ever work? Without naming names, the only reason we used this at a previous company was to kind of handwave around hey we have this tool doing regular security checks.

> The first excuse Smith gave was "human error." He says there was a particular (unnamed) individual who knew that the portal needed to be patched but failed to notify the appropriate IT team.

How is this one individual responsible for tracking all IT security vulnerabilities in all the technologies that equifax uses across its stack? How do they not have an admin team whose job it is to do these things?
It's not a strawman. The parent is suggesting that we as a people have no problem with allowing low-income or low-net-worth people to gamble (pointing to the acceptance of Las Vegas as evidence). Then an equivalence is drawn between gambling and securities investing. By pointing out that, in fact, 31 states make commercial casinos illegal[1], I am refuting the suggestion that gambling is considered acceptable, which weakens the argument that securities investing should be acceptable as well.

[1] https://en.wikipedia.org/wiki/Gambling_in_the_United_States