skysight-inc/HackerNews huggingface dataset:
We use SAML set up for our customers' identity providers (most of the time, Office365 Azure AD or Google Suite), from a NuGet package.

From there, it's a bearer token encoded in JWT format for ease of debugging. From another NuGet.

We also support username and public key authentication for our SFTP server.

We do support username and password if necessary.
It's not as useful but it is far from useless. The ordinary artificial horizon indicator should have been able to show that the external sensor was far out. I don't know anything about the aircraft or Boeing but as a software designer and implementor I would have wanted to use the output of the artificial horizon as well as the angle of attack sensor in an attempt to gauge the quality of the readings. I'm guessing here but it seems likely the aircraft was equipped with a normal gyroscopic instrument in addition to the external angle of attack sensor.

Of course the Boeing engineers who worked on this could easily tell us exactly how it works and why. I don't suppose that will ever happen though.
vim
clojure
> It's a total mess and hopelessly complex for the average consumer.

Sounds like something the people on this forum can help improve.
Professionals.

Hire an expert.

If you can't answer these questions yourself (which is fine - it's specialized knowledge separate from the skillset needed for building a useful application), you are lacking critical competence for coding anything handling health information.

The security minefield is much much bigger than the login page.
Best FREE training on how to make money online
My best practice is I disable it and that's the only time I deal with it on my notebook.
Yeah not sure about that. I went for a few ICOs. The western ones all had quite a lot of KYC stuff. A Chinese one had nothing but I presume there are some banking arrangements in China that turn a blind eye. The whole China scene seemed pretty unregulated. If you wanted to launder it would probably have been the place though they seem to have cracked down now.
and what do you use for authorization?
The Rust language doesn't know anything about locking, or even threads.

The thread safety is built using Send/Sync traits, which libraries for threading and synchronization primitives, atomics, etc. implement accordingly.
The idea of effective competition in emergency services has always struck me as fanciful.

The benefit that competition provides to incentivize lower prices and better services is a consumer's ability to easily deny someone their business and go elsewhere.

What would this look like here?

Would one be in the back of an ambulance doing price shopping on a tablet as they are fighting some terrible injury?

Perhaps tie in different billing departments in a conference call as they bid over who will do the critically urgent surgery as the patient slides in and out of consciousness?

Maybe decide to have a heart attack during a winter sale special or reach into their dresser to get a coupon out as they collapse to the floor?

Or would someone be placed on a transportable life support system as they get ferried across a city deal hunting by having different procedures at different institutions, expecting them to talk to each other and string together piecemeal lab results for a coherent diagnosis?

Maybe someone would do the work beforehand, search all the popular ailments and their procedures and then do price shopping in good health and prepare an execution plan if they fall ill?

Maybe there's a non-absurd example, but I honestly can't think of it. The competition mechanism seems to be a completely unrealistic application.
Diagnostic Overshadowing
i've stopped being surprised a few years ago that it's usually in the 'call us' price tier :)
It's not a technological problem but a political one: the obfuscatory pricing is deliberate.

Maybe you could have "fighting hospital billing as a service", but that's definitely going to need a chunk of human labour on top of whatever AI assistance you apply.
Love this attitude! Keep it up
It seems many prefer to be exploited for $200 vs $10 per hour... Good on them! More money for less work.
What's not to like?
No, but I do try to eat at least one piece of fruit per day, whatever I get my hands on.

I mainly remember because this was my passion. I also constantly meditate on everything.
Can't you stop past blaming the project manage by analysing the reason he/she did something wrong?
I never said people didn't like Spotify or Slack. In fact, I said the exact opposite. Please read the comment properly and try to understand, don't just skim checking for "the right" opinion.
Well, it's one of those age old debates as to what the powers of government should be. I quite like set ups like Jersey in the Channel Islands where the max tax is 20% and the government is more like a town council that limits itself to fairly basic stuff.
I know... But didn't want to think about that.

I agree shells are great and PowerShell is confusing.

It's merely amazing text is still king.
Ambulance staff are incentivized by pretty nurses and free food/snacks. Ask any paramedic in a city with enough choice of hospitals and they'll tell you.

What is the best answer to the "emergency care competition" that you've found?

And what proportion of medical spending is on emergency vs. not?
I'm not so sure average household income would be all that useful when income inequality is high. You would have to slice and dice those numbers a bit more to make them even vaguely representative of reality.

Besides, you have to factor in living costs.

I've looked into living cost a few times when considering working in the Bay Area and I realized that while my income would easily double, my living costs would increase a more than just a factor of two. I would have to accept a lower standard of living than I enjoy now.

I think the only way to really deal with healthcare cost is to look at whether or not we think it is a good idea that there is a huge profit margin. For patient outcomes and for society as a whole.
One of the child comments of the one to which you replied gives an example of a Linux subsystem for running Darwin binaries, so clearly it’s doable.
Same, never hade any problems where I live. Not all problems are technological.
I have had a similar "cornerstone habit" for several years now, with the same underlying assumption: if I can get this one thing right, the rest of my goals and habits will fall into place much more easily.

However, I've formulated the habit slightly differently:

Turn off all devices by 830pm

I have an alarm on my phone that goes off at 820p to let me know all devices need to be powered off in 10 minutes. That means no phone, no computer, no TV, no iPad, etc. The only exception is my Kindle.

What I've personally found is that if I don't have any devices to distract me, 90% of the time I'll start to get sleepy before too long. This makes going to bed at 9p or 930p so much easier. This is especially true after my body has adjusted to a week or two of going to bed early and getting up early. I do occasionally get stuck in a book and stay up late reading, but it's pretty rare, and I don't usually have that stupid addiction feeling I get with Hacker News or Reddit where I'm not even enjoying myself anymore but I just can't seem to put the phone down and go to bed, even though it's 12:30am and I wanted to wake up early.

Previously, when my goal was to get up by a certain time or to get a certain amount of sleep, I was in a constant war between two versions of myself: the one that wanted to stay up late and the one who wanted to get up early, get more sleep, etc. Shifting to just turning off devices at a certain time in the evening has proven to be a lot easier to conform to and still get the same end result.
I feel you on this, but for me the solution has been really simple so far: just a dedicated notes folder + good ol' atom.

Ticks all the boxes & uses nothing but my default workspace
https://tools.ietf.org/html/rfc3339 exists as a profile of ISO 8601 for precisely that reason, its representations are much more restricted.
I wanted to disagree; how did those professionals become pros? Learning by doing , most of them , after all.

Then I read the last paragraph of the question.

Please follow this guy’s advice. As someone whose medical data you might one day be handling: please get someone who does this well.

Imagine you (or a family member) ever end up sick; your medical data ends up on Pastebin, and the arstechnica article about it surfaces a forum post from the engineer responsible: “hey guys howto auth?”. Honestly: how would you feel?
On Mac I use the emacs-mac port by Mitsuharu Yamamoto: https://bitbucket.org/mituharu/emacs-mac/overview
which, in my opinion, works well. It can also be installed via brew (from source) or brew cask: https://github.com/railwaycat/homebrew-emacsmacport
Yes, you can. You can emulate a Turing machine (except with a finite memory, of course) in safe Rust, but given that the Turing machine is entirely serial by design, I don't see how is that even relevant.

In practice, Rust has `unsafe {}` escape hatch that allows building of abstractions (like mutexes) for the safe majority of Rust using contained bits of as-safe-as-C code where necessary.
Top Fintech Takeaways of 2018
How do you implement that cache invalidation, assuming a multiple app server environment? Is it something like a separate redis server?
And people still wrangle with this... how can it be easier to struggle like this than learn how to use SmartOS and Triton? Kubernetes is a solution to severe OS virtualization deficiency in Linux, most notably orchestration. You, know, the problem which is non-existant in SmartOS with Triton and large scale configuration management with operating system packages. Every so often this hits "Hacker News" and people will rather struggle than master something new. But one cannot polish a turd.
> healthcare

> OIDC

Nooope. Not a good idea. OIDC is pretty damn complicated to implement as a server. And it doesn't help at all with anything around revocation etc. To make that possible, you have to add a load of extra work and you basically lose most of the benefits of using JWTs.

First, as others have said, if you don't know what you're doing on this, you have no business trying to secure health data. Bring in someone who does know what they're doing and then pentest it aggressively.

Second, I'd suggest you'd be better keeping it super simple. Just have a token in a table, refer to the token by its ID and then attach a 32 byte crypto random to it which gets checked before the existence of the token is acknowledged. Compare it with constant timing. If you don't know what that is, again, you shouldn't be doing it with health data - best to learn on a project with less sensitive info.
Ory – Open Source OAuth 2.0 and OpenID Connect
Is there any way this could be represented via interactive graph? We were able to tame much complex stuff than deliberate obfuscation by people not aware what tech can do.

I guess there is not enough incentive ($$) to solve this problem.
He suggests KISS: you can probably get away with plain old server-side auth, and if you really need client-side tokens, use something simple that just encrypts and signs them: https://news.ycombinator.com/item?id=13612941#13615634
It's considerably easier to run Linux on my ThinkPad x270 than it was on my xps 13 Developer Edition which came with Ubuntu pre-installed.

In fact, I have no issues at all on my x270. Everything – including Bluetooth – Just Works™ out of the box.
I wouldn't compare a chiropractor to a physical therapist, but $1400 for a sore shoulder? Was this in the ER?
An Interview with UN Special Rapporteur David Kaye
Pedantry: Those are terminal emulators, not shells.
Classic hacker news. Ask for technical advice, get called incompetent.
Konqueror and Dolphin use the same kpart under the hood for directory display.

Konqueror → Settings → Configure Konqueror… → File Management → General → Previews leads to the same configuration dialog.
I wouldn't recommend any of the current generation kindles. I've been gifted every single Kindle there is, and I have to say that $50 is not worth it unless you really just want a throwaway tablet as an alarm clock or something. It's cheap for the following reasons:

1) you're stuck inside the shitty Amazon App store ecosystem. Lots of developers hate that Amazon created their own separate app store, so expect no major apps on the download section of your kindle's app store. Especially not Google apps like YouTube. Just the lowest quality of low effort apps made by foreign developers.
2) screen and speaker quality sucks now compared to previous kindles. The UI and user experience has just always been bad because you don't get anything resembling stock Android OS. You have to use whatever weird skin that Amazon decided to tack on to their weird and limited version of Android.
3) the tablet's price is subsided by ads. It's cheap because you have to see a different ad every time you unlock the Kindle screen.

The kindle's speakers used to sound amazing on the old HD, I forgot what it's called but it was the best tablet Amazon ever made. Every Kindle ever since has been significantly worse.

Id you want a tablet, find some $80-$100 Chinese tablet from somewhere that can at least doesn't blast you with ads. It's worth it.
20 Best Tech Twitter Threads in 2018
All those examples are far simpler in their structure than the internet though. Because so far I've not seen anyone actually banned from the internet. I've seen people banned from private websites, I've seen people banned from fund-raising platforms, I've even seen people banned from hosting companies but none of those are analogous to having your taps turned off.
Download Movavi Video Suite 18.4.0 Crack 100% Working (x86x64)
Agreed, providers are not as willing to negotiate with you as they are with insurance companies. Probably because they've already negotiated...

Just go all cash with an HSA.
In a normal sail car you'd have to tack, but otherwise the same forces apply. The clever thing about the propellor is you get a sort of cork-screw-tacking for free allowing your motion to be in-line with the wind instead of having to be at an angle.
It's not a specification, but an interesting project is to formalize and prove safety guarantees of Rust:

http://plv.mpi-sws.org/rustbelt/#publications

In order to do this, there also needs to be an unambiguous formal semantics of Rust, so one might even hope that this will turn into some form of official language specification.
Enterprise Mobile App Development Challenges and Solutions
Good point. I did not know perf could print backtraces.
There probably is a market for MVNO that requires to solve voice captcha before being able to reach callee.
Government seeks parliament nod to pump Rs 2,300 crore into Air India
When does it stop being a fad?
Ask HN: What do you think about the idea of package manager for web components
So, somehow technology can help educate ~300 million people about insurance, procedure costs, payments, and also provide medical education to those 300 million people so that they can wrap their head around the necessary medical lingo?
Sure, there have been multiple bubbles. Always good to see the tulip posters keeping at it.
I Helped Make an ECommerce Brand $90K in One Month Just by Implementing These
The ram air turbine is only deployed in irregular or emergency situations, and even then, no it would not be a reliable airspeed indicator unless it was reengineered to be one somehow.
"Google Trusted Photogapher" here.

https://www.google.com/streetview/hire/

Verification: https://goo.gl/maps/Nx9JwEB731m

We can now add to Streetview instead of just adding to Google Maps. I.e. we can create a blue line instead of just blue dots.

And a lot of us are doing it, by request, and paid. And no, Google never paid us anything, we had to sell by ourselves and set our own prices.

So this guy will get paid, this is great PR.
The big-data makeover of humanity could be a recipe for disaster
I never understand why people try to separate blockchain and bitcoin.
I roll my own using well supported libraries for the languages I work with. These libraries handle the gory bits and pieces where it's easy to make mistakes.

It's a split between using passwordless logins, or standard password authentication depending on who the target audience is.

I would never in a million years ever think about using a service like auth0. It's not just a huge privacy issue but now a critical component of your app depends on a third party service. Also I know of a few sites who use it and the user experience is really bad. It seems like every other time I access a site that uses it, I have to goto a third party auth0 screen to re-enter my login details (which are already auto-filled out by the browser).

Your user authentication flow is a very unique aspect of your site and it's also one of the first things your users see.

You should have full control over it because if your user's first impression is a slow loading non-intuitive user auth system that bugs them to login every few days they're probably going to look for a competing service. I know I would.
The fact that there is no standard set of benchmarks was recognised some years ago:

https://cs.gmu.edu/~sean/papers/gecco12benchmarks3.pdf

http://www.cs.put.poznan.pl/wjaskowski/archives/wp-publicati...

While I think that the situation is improving, we are still far from a common set of benchmarks used by the entire GP community.
We have the same system in the US (the Do Not Call registry) but it’s ineffective because Caller ID can easily be spoofed and these organizations are out of US jurisdiction. Seems more of a technical limitation than a policy one.
It's all about the process not the end goal.
NASA spacecraft hurtles toward historic New Year's flyby
It depends, but in general it's not a bad idea ;)
Not just health insurance, but healthcare is crazy too.

Spent a total of 36 hours on the phone with the hospital to figure out how much something would cost because I knew I had to pay out of pocket. And they weren't even right when they finally gave me a number.

Had a doctor remove a cotton ball from my ear in the hallway. Charged me 2.4k for that. Didn't have insurance either.

My wife's friend delivered her own baby in the hallway and they still sent her a bill for delivery.

My wife had her gall bladder removed, supposedly the most common surgery. Surgeon charged 25k, hospital charged 65k, anesthesiologist charged 3k, and a doctor that talked to her for 25 seconds charged 1.5k. Insurance and the hospital argued over the bill for almost a year, during which time the hospital kept sending me payment due notices.

No one in this industry has my sympathy.
Weirdly, the groupware server I use (SOGo) is written for GNUstep. It's the only app I know that uses it otherwise.
You may disagree, but there are other reasons not to rely on DNSSEC besides "mortal men not being capable of understanding it": https://sockpuppet.org/blog/2015/01/15/against-dnssec/

HTTPS does seem like overkill, but on the other hand, it's likely already running (even I, who host my own mail, have an HTTP daemon on the same server), so in the common case, it doesn't increase the attack surface.
Even in non-emergency care, perfect competition requires perfect knowledge (the consumer to know medical knowledge), perfect information (knowing the exact quality of care from all competitors beforehand), rational buyers (having no preexisting biases based on irrational cognition), no barriers to entry or exit (ie, being able to switch hospitals mid stream), no network effect (the previous state...eg who does the lab work, shouldn't have an outsize influence on the subsequent, eg who does the diagnosis... See dollar auction for an extreme example https://en.m.wikipedia.org/wiki/Dollar_auction) and a variety of other fairly unachievable factors which do not apply here.

It's not a good model to structure the allocation in this particular instance, too many conditions are nearly impossible to satisfy. It's not a sensible way to design this market.
Thanks, I didn't realise this. Maybe one more sign that sexual fetish has largely stopped being taboo.
Phew, my 2013 Macbook is lagging from that page..
There are seriously dangerous attitudes in this thread regarding what constitutes token invalidation. Hire someone skilled at secure auth architecture. You should have at least 2-3 senior engineers who are very well versed in this if this company is serious about doing anything related to protected patient healthcare data. One person's opinion should never end up being the only input for super critical decisions like you are trying to make.
How to Flirt with BBW Singles Online
In Fred Moody's "I Sing The Body Electronic"[0], there is a passage where the author gets to read such postmortem documents and is surprised by the brutal honesty, but does not give any quotes. Now I see what he meant.

[0] which I highly recommend, btw
We use a local version of UAA (https://docs.cloudfoundry.org/concepts/architecture/uaa.html) he behaves like a google or facebook authentication where the user concedes the permission to the apps using OAuth 2.0 protocol.

We have 10+ web clients, 2 mobile apps and one internet gateway. Spring Security make it very easy to integrate everything.

https://oauth.net/2/
Auth0 is the best documentation to learn about oauth: https://auth0.com/docs/protocols/oauth2

The best part of using Oauth is that you can change your authentication server (UAA, Auth0, etc) without changing your app code (only configurations)
Discussing Exploitation and Priv Escalation – Analysis of GVisor Exploit
The talk that just finished "The Precariat: A Disruptive Class for Disruptive Times." was pretty good. Guy Standing is an excellent speaker.
Huh, that's much lower than I thought.
I would rather have a formal spec as the definitive one. Deriving a formal spec from a readable one seems to hit ambiguous cases all the time. Just look at publications that do that for C or Java.

With a formal spec you could also derive an implementation automatically which is a great useable reference. Look up the K framework for one possibility.
EMR, Health Information Exchanges, teams of analysts organizing standards for information exchange, and mandates for upgrades should have set the stage for transparency beyond published fictional information by providers.

Would someone please comment about these projects? The affordable care act gave more than a billion dollars away for people to work on the exact same, redundant projects in regions across the United States. Did these initiatives reach production and are they running today?
Similar post was already shared:
https://news.ycombinator.com/item?id=18762435
I start with a pretty strong bias against any philosophy that counts skepticism of itself as proof of its own existence. It's like a religion that says you know it's true because other people will claim it's not true.
Interesting, what do you think makes is encumbered by LLVM?

I thought that sqeezing MIR in the middle Rust could get both Rust-specific transformations and then benefits from the LLVM generic code optimizations...
I have heard of keycloak , open source auth platform

any reviews ?