skysight-inc/HackerNews huggingface dataset:
To be clear, HL7 is a not-for-profit organization which has created several sets of standards over its history (HL7-V1, V2, V3, etc)--those standards are probably what you are referring to. HL7, as an organization, is very much a leader in this space.

FHIR, which is what Apple is using, is its own standard, (created/managed through the HL7 organization), and addresses most of your concerns (https://www.hl7.org/fhir/)
> Because of the undertone possibly hinting at nationalistic motives (i. e. Europe harming a foreign competitor for its own business' benefit),

to add to this, most of the european fines don't make the news because they either consist of a "mundane" market (like a major steel fabrication plant in italy) or are simply for smaller companies which won't make international news anyways.
huston, we have a problem
I don't think it has anything to do with screens per se - it's about being alone and free to think, while not being able to do anything else. Other people are as much, if not more, distracting than screens - hence the time spent in shower or on the toilet is so frequently mentioned as the source of valuable insights.
Sounds like the ideas and insights of John Boyd and his disciples (whose ideas on 3rd generation warfare became the core doctrine of the USMC, and the disciples wrote a paper on 4th Generation Warfare were largely ignored) is finally being taken seriously in the US.
apple is using a new standard from hl7 called FHIR which is bringing restful apis to healthcare. so its like the json you get from any other tech api. i have a startup (https://1up.health/dev/fhir) that uses it as the base of our healthcare api platform for app devs building products that need clinical data.
apple and google dialing back the usability helpers show that the picture is not that black and white.
China clones monkeys, a first with primates – and a step closer to people?
Microsoft and Google both failed with forays into medical records, so I'm skeptical apple will see much success.

Most people do not want to manage their own health records, or only become interested for short periods of time after illness.

For those who do want this service, I'm hopeful Apple will improve user experience such that its easy but provides value.

EHR vendors do not make data sharing easy so having an even larger player in the space, pushing innovation, is welcomed.
I think the vote count is obviously manipulated. Stay away from this site.
I feel that you're significantly understating the potential of what sophisticated network-level attackers can do here. It's annoying... I fundamentally disagree that there's "little point" to this.

First of all, most folks are only signing the Release file. The majority aren't doing debsign/debsigs or dpkg-sig. Okay, some packages ship with some md5sums. Not all. I'm not too worried about tampering or integrity of .deb contents.

How do I know I can trust the Debian archive signing key is in safe hands? For that matter, what about the many third-party repositories and keys that are trusted by my system? Not long ago, Ubuntu was trusting a 1024-bit DSA key. All I need to do is steal or brute-force one of these, and combine it with techniques available to state-level or network adversaries (think of NSA's QUANTUM-insert). Maybe some DNS poisoning or hijacking. Now when you ask for a package you need, I'm giving you my malicious repository instead.

Hostname validation is an important property. Let's say I have a large-scale network where I control the main DNS server, and I can modify records that come from more authoritative sources. I point deb.debian.org and security.debian.org to some other boxes and now no one is getting package updates. Now I have everyone in a more vulnerable state, from which I can figure out more ways to compromise them.

What about the individual package maintainers, can I trust them? Nevermind a distribution like Debian which probably has formal security review. What's to stop one unscrupulous person from being paid to insert a temporary backdoor? Well, that's not so much related to TLS.

> HTTPS does not provide meaningful privacy for obtaining packages.

False.

As mentioned by other commenters, fingerprinting and profiling of the machine — which versions of which packages are installed in the environment — is a real risk which has been demonstrated in practice by researchers. As you mention, the transfer sizes are a mild indicator; not a strong one. But the bar is orders of magnitude higher to identify what's running on a server with apt-transport-https.

Deep packet inspection and Narus is a thing. You're assuming HTTPS is not valuable because the average end user isn't at risk — advanced attackers aren't in their threat model. But when you have machines that both need to be kept highly secure and run a highly specific set of packages, it's absolutely necessary. Imagine I'm an intelligence agency and I'm in that advantaged position where I can see every HTTP GET in plaintext before it hits the official repository, from every client globally. I'm looking for a needle in a haystack: a set or series of packages installed in a certain order. It's trivial now to find my target and learn its IP address.

You're the current project leader... is this page the official stance of Debian?
You're thinking of the older HL7 message types. FHIR is a newer xml/json standard that's much more programmer friendly.
Medium and SBNation are my two worst offenders. I have custom CSS rules I install whenever I see a site do this to just hide the div they're trying to show me.
To be clear, HL7 is a not-for-profit organization which has created several sets of standards over its history (HL7-V1, V2, V3, etc)--those standards are what you are referring to above.

FHIR, which is what Apple is using, is its own standard, (created/managed through the HL7 organization) and is based on more modern representations of data (JSON, etc). (https://www.hl7.org/fhir/)
At my last company two pizzas would be eaten by any two people, myself included.

At my current company, they'd have to order 2 vegetarian, 2 gluten free, 2 plain cheese, 2 pepperoni and then for some reason 1 anchovy pizza that nobody would even touch. And it would take a meeting just to figure out the pizza order for the other meeting. Then another meeting to discuss who needs to go to that meeting.
And often lots of time and energy is wasted (on patients and doctors) onto restoring context. I can see that when they access your file on their computer. 5 minutes of catching up, with potential errors or mistakes.
Perhaps "antithetical" to privacy.
An empty, boring, or bad GitHub account never hurts, but a good one can definitely help. Things I'm looking for are interesting projects, contributions to other projects (perhaps ones I know about), good discipline in git commits, well organized code, attention to detail (as in code style), and good interactions in tickets and code reviews. I'm not interested in whether or not your GitHub projects use any particular languages or technologies that are relevant to the role.

There's this idea that no one should be expected to spend their spare time working on open source, which is fair. However, that are many candidates that do, and it helps a lot with the screening process. We might waste more of your time and ours if we have to coax out the kind of insight that I can get from a GitHub profile over the course of several phone screens and IRL interviews.
I feel the correct solution to this problem is for legislation that forces hospitals to quickly, easily, and cheaply share patient information. If you go to one hospital and then go to another hospital up the street even though they probably both use epic they have to fax or mail records. Not for technical reasons but bureaucratic ones.
> Does making the hardware HIPPA compliant give any special protections agains FBI requests unlock phone or other government regulations and requests?

Not in the least, and it's sort of a category error to say "make the hardware HIPAA-compliant".

Apple doesn't really have to do anything to make the hardware HIPAA-compliant. In fact, pretty much any phone that's on the market today could be used for accessing protected health information in full compliance with HIPAA. What happens at the software level is more relevant.
I'm the author of the LWN article, so glad to hear the positive feedback. I wrote it because I run a Mastodon instance and have been getting pretty confused about how these fit together. ActivityPub is a very exciting direction and I'm hoping to see Mastodon implement it completely (right now their support is only partial). OStatus comes with a lot of historical baggage - down to the name itself - and that's bumping up poorly against modern expectations like privacy.
Thanks for the comments, and it sounds like you want a deeper dive as to some of the design decisions around TimescaleDB.

What might be useful to start is two of our technical blog posts around how we design internal partitioning [1], as well as how this compares against declarative partitioning in PG10 [2].

We aren't rewriting the lowest storage layers like cstore_fdw, so we can continue to use Postgres' heavily-tested storage layers....as well as work with its existing streaming replication and recovery mechanisms. We also aren't packing individual writes into files (like it sounds you are doing with floatfile), arrays (like in tgres), or other TOASTED data structures, although we might be compatible. We certainly do support the range of types (arrays, JSON/B, etc.) in our data rows.

Fully agree that projects differ on their needs of inserts vs. queries time, but in addition to much higher insert rates, our general data model and aggressive constraint exclusion across chunks provides meaningful time-based query improvements. We also have all sorts of planner optimizations, e.g., we taught the planner that querying for the data by time rounded-to-some-time-bucket preserves the sort on time --- which is useful for all kinds of ORDER BY/GROUP BY queries. We've published various benchmarks around this [3].

Finally, there are a lot of changes needed to "just make things work", which also includes support for constraints, foreign keys, upserts, triggers, etc., which enable capabilities like data retention and continuous aggregation policies.

[1] https://blog.timescale.com/time-series-data-why-and-how-to-u...

[2] https://blog.timescale.com/time-series-data-postgresql-10-vs...

[3] https://blog.timescale.com/timescaledb-vs-6a696248104e
Apel za pomoć bolesnoj deci Srbije
Why do you feel that absolute income is the relevant metric for determining the level of underpaid-ness?

You can produce significantly more value than you're paid, even at high income levels.
How to Choose a Talk Topic
That's a realisation which hit me about 5-7 years back.

Slow-motion train wreck.
It's sometimes interesting to pose a little thought experiment to somebody about what they think they could get done if they had 10 world class developers and practically unlimited resources - certainly the ability to hire or acquired almost anybody or anything within some degree of reason. What could they get done in 10 years?

Now multiply that by ~2,000. That's, roughly, the sort of resources Google has had. Kind of makes you wonder. Do we dramatically overestimate our abilities, or does the efficiency of companies like Google truly diminish as much as this little thought experiment would seem to suggest?
Some other footage:

https://www.youtube.com/watch?v=NuXHriwQB9g

https://www.youtube.com/watch?v=8ZZs1pxqB9c
Is it legal for them to offer those services?
Better video: https://www.youtube.com/watch?v=NuXHriwQB9g
You would be correct. The fix is to have the Department of Health and Human Services administer health records [1], and use Medicare funding as the stick to require its use.

[1] This requires public policy implementation, US Digital Service/18F levels of technical competency, along with ruthless transparency and governance.
Indeed, many people make wrong decisions based on incorrect assumptions.
Un Google the internet? I hope so but almost every remotely commercial site out there uses Google services.
I believe this is called "being mechanically minded". If you understand the physical rules and the components, you understand the inner workings. Good mechanics have this. Bad mechanics don't. Sadly being an auto mechanic pays little, but the skills are obvious in good programmers too.
ShadowNode: another runtime for Node.js app, which is used in low memory devices
Purism Android-free and iOS-free phone interface design
Everything uses HL7, every last bit of equipment that has patient details on it, and people are familiar with working with it. This will be why they do it I think. I don’t think it can change now as it’s so deeply entrenched.
Nice work!

I'm impressed by the CPU footprint. Shouldn't be a surprise as it's all hardware now but still great to see this which makes me comfortable let it running along.

Is there a way to change store path?

Also I changed hot key twice and seems both keys are in effect now.
I might be wrong, but I would think that end-to-end public crypto can be used for more than just ensuring privacy.
Thank you! I'm developing a project involving rpi0 now; this will simplify things so much!
Government organizations also have an obligation to make many of their services available to everyone, without discrimination, whereas companies can choose to ignore portions of the market (unless it's a protected class) that cost more to service than the value gained.
the method they get data is patient mediated, so they are not beholden to hipaa laws. we use the same method at 1uphealth to bring clinical data from health system records to app developers and patients
I used to work in small teams/companies or alone and got a lot done that way. Now I am in a big corporation and I am still stunned by the overhead there . Between coordinating with other teams, dealing with offshore teams and reporting to management you barely get any work done. And if you get anything done it's usually mediocre because there is no room for experimentation or rapid change if something doesn't work. I am just finishing a project that took 2 years. I am thoroughly convinced that the 2 developers who did most of the work could easily have done it in half the time if they didn't have to work with other teams who didn't deliver and stakeholders who couldn't make up their mind. We could just have worked through each issue but instead we had to wait for other teams and deal with their mediocre output which was incredibly frustrating and demoralizing.

It seems the bigger a company gets the more they favor predictability over excellence.
Does Rising CO2 Benefit Plants?
One thing to keep an eye on as your team grows is process. It's very typical for processes/systems to evolve as teams grow and people have new opinions and decide new pieces need to get added. It's almost never the case that process gets removed. Over time, you can build a decent slowdown into your work just as a series of small increases in process cost.
I imagine you use fixed and then partial reinforcement to train it first, then do the experiment.
LG to Raise Prices on Washers After Trump Imposes Steep Tariffs
I'd say both. Programming/CS is particularly prone to practitioners overestimating their ability because SW is always incrementally "easy". From my own experience working across SW, HW and some mechanical design it's always the SW part where I get overconfident and I've been at it for almost 30 years.
JVM?
Maybe you should stop being confused - turning off your WiFi saves such little battery that it’s not the time to do.
I love it!

Only problem I see is that 0.5 carat cremation diamond is $6000 US, and it would be a "waste" of the ashes since they only use a few ounces (~150g) and a human cremated is roughly 5kg.

BUT, if a person is fine with only sending a portion of their loved one to the moon for the super "low price" of $20k, it would only take 75 to break even, but there is room for a WHOLE lot more.
Weren't they written by someone in the 16 years old range? They were not good books but it is still impressive for a teenager to have the discipline actually create a finished work. They definitely played up that angle when marketing the books.
Is it against "generally accepted practice"? Everything I've ever heard from recruiters and hiring managers has been that they typically have about 30 seconds to review any given resume, and zero time for code review. Do you have a source which says this is common or recommended practice?
> Anyway, my take on all this hyper-crap is that it's useless without a good scripting language. I think that's why Emacs was so successful, why HyperCard was so important, what made NeWS so interesting, why HyperLook was so powerful, why Director has been so successful, how it's possible for you to read this discussion board served by Frontier, and what made the World Wide Web what it is today: they all had extension languages built into them.

I'm wondering what your wiser, older self has to say about this 20 years on. Isn't it useful that documents you wrote 20 years ago can still be read?

From my memories, the Web craze started well before JavaScript, and JavaScript really only jumped on the bandwagon; so how could it be the critical success factor for the Web?

The success of the Web and JavaScript in the last two decades speaks for itself; but in 2018, JavaScript and the procedural Web could very well be its undoing when considering the original goals of the Web, couldn't it?
By using distributed verification with rel=me links in both directions: http://www.kevinmarks.com/distributed-verify.html
IIRC, hospitals have been looking for something akin to encrypted "digital dogtags" which can be accessible by qualified medical personnel. Obviously a tricky proposition to both keep data secure while also accessible to those to whom this data should be accessible.

Perh their reputation for privacy combined with their market share can enable a viable solution to this dilemma.
How solar power went from nutty to normal
It looks to be read-only at the moment, meaning you can't necessarily walk into one of those few health care systems with your iPhone and have the data sync with the EHR.
CDEx: Consumer-Directed Exchange for Healthcare
If I may interject a small, shameless self-promotion, we recently published a paper looking at exactly this using GitHub data [0]. Lots of caveats, academic limitations abound of course, but it may be of interest to some.

[0] R Soc Open Sci. 2016 Apr; 3(4): 160007 https://dx.doi.org/10.1098%2Frsos.160007
I got into the habit in the 90's when using it to scroll the page faster. Since I was already clicking on links, my hand was on the mouse. It was a lot easier to click and drag content than to click the toolbar on the right or to move my hand to the arrow keys.
This is great, I wonder what is such a talented developer doing these years? Has tech moved so much that there are less and less HFT jobs? Or is it the opposite?

On a side note - can anyone recommend a book with similar stories? Ie. from the trenches of development, finance + software?
Blue-green distinction in language
One million webmentions sent
Ask HN: Feeling stuck and insecure. How do I grow as a software engineer?
I'm a 32 year old software engineer. Been coding/hacking since I was about 14 and I still love doing it. Been mostly working on web-related projects/jobs. Worked in the industry for ~7 years now. No CS degree.

My current job is a web-based SaaS tool, mildly successful. Been with the company for ~4 years, an early employee.

With the success of the company, we have grown, and the pace has become much faster and I feel I am not keeping up.

My day to day is very hectic, before I can blink the day is over without much work done. Part of my responsibilities (except my core of coding) are interviewing candidates, being a go-to guy in the team and code reviews.

Lately (~4-5 months) I've started feeling very incapable. I've had several tasks and small-medium projects that I keep getting "stuck" at, and they drag on and on. I also feel that as a senior developer, others look at me as an example and I feel like I'm setting a very bad one.

I've noticed that I feel more and more insecure, a fear that I won't be able to deliver on my projects, that I always require another team member's assistance to complete my work. Everything has become difficult, and I mainly feel that I have no "quiet" space (mentally) to be able to think and break down my tasks, and even when I try I hit a mental wall and more feelings of inability to handle the tasks.

Also, I feel my mental capacity has shrunk. I can hardly handle more than one thing in parallel, and even just one thing, as I said, has become hard.

I feel that I haven't grown as a developer as my peers have, some of which are newer and less experienced.

The challenges are interesting and hard, and I feel I need some guidance on steps I can actively take to improve myself and get out of this long rut.
What does the customer see when you reply from Front? e.g. your individual email (youremail@company.com) or a team email (sales@company.com)

Sorry for the basic question -- I couldn't tell from the demo video and the free trial takes some setup. Trying to figure out if this fits existing workflows or would need new workflows to be built around it. Thanks for your help!
im sure there are, have you heard of Coinpot?
The Biggest Cheater in Gaming History?
Given the centralization of the data in the Health app, I would like to see Apple make it easier to get Health data out of the iPhone for personal analysis.

The Export feature in the Health app currently exports all data as a large XML blob, which is not easy to load up into a spreadsheet. (for reference, I wrote a script to extract heart rate data from the XML and get it into a CSV: https://github.com/minimaxir/get-heart-rate-csv)

The workaround is to use a 3rd party app, which complicates privacy.
BitTorrent only works well (i.e in a true peer to peer fashion) if many people are serving up the same files so that some sources are always online. Outside of piracy that is rarely the case.
> He doesn't strut across a stage next to a product he yelled at others to make.

Is that what you believe Berners-Lee, Engelbart, and Kay were doing?
Please read the rules for Show HN and try posting it there.

https://news.ycombinator.com/showhn.html

https://news.ycombinator.com/show
those used at that time are still active?

which is the best?

Thanks
I hope so. Their first round of bug fixes caused pretty significant slowdown on 2015 and older CPUs.

> With Windows 10 on older silicon (2015-era PCs with Haswell or older CPU), some benchmarks show more significant slowdowns, and we expect that some users will notice a decrease in system performance.

> With Windows 8 and Windows 7 on older silicon (2015-era PCs with Haswell or older CPU), we expect most users to notice a decrease in system performance.

> Windows Server on any silicon, especially in any IO-intensive application, shows a more significant performance impact when you enable the mitigations to isolate untrusted code within a Windows Server instance. This is why you want to be careful to evaluate the risk of untrusted code for each Windows Server instance, and balance the security versus performance tradeoff for your environment.

https://cloudblogs.microsoft.com/microsoftsecure/2018/01/09/...
Paradise Lost has some incredible lines, even to the modern reader. Some of my favorites (I keep them in Anki to periodically remind myself of them):

- No light, but rather darkness visible.

- Rather than be less, cared not to be at all.

- To sit in darkness here, hatching vain empires.

- The rising world of waters dark and deep. (not sure why this has never been referenced in a rising-sea-levels article - seems quite apt)

- Flowers worthy of paradise.

- And I feel that I am happier than I know.
I wish I lived closer - I'd love to hear/feel this in person.

The feeling of top fuel dragsters coming off the line (https://youtu.be/W9L3bllEbm4?t=11) is intoxicating - I can only imagine what the Falcon Heavy would feel like!