skysight-inc/HackerNews huggingface dataset:
Why couldn't you repackage this for diy "server" usage and ensure that it's mobile friendly? That would solve that problem.
Building Applications with Modern MEAN Stack
Wifis are often absolutely terrible for low latency applications such as voip (buffer bloat). Also that means your phone only works at home and in the office
Actually 5G provides this overhaul, more than it provides speed benefits for customers.

The 4G backend still has a web of trust between operators and their e.g. IP exchange providers. As far as I know, this will change with 5G.

Roaming data confidentiality can then be routed and encrypted until the home operator network, while the associated metadata is accessible for the IP X to provide their services.

The home operator can verify the smartphone is actually in the visited network.

These are all bits and pieces that break up the operator's web of trust.
The further toward the poles you go, the more mental healthcare is needed, so it makes sense they would have the experience and infrastructure! (Completely serious.)
This is all fun and games until Peter Thiel needs a new host for his brain.

disclaimer: I am not Peter Thiel
"No revocation" is a dangerous constraint to have in an authentication session. What happens if a user's token is compromised? You have to either wait for the token to expire (if you implemented expiry) or log out every single user.
This is why things like MAAS exist, which is a 'cloud provider' that lets you provision bare metal machines. Plug in a new rack of servers, let them netboot, and let the clients spin up a machine matching their requirements in the same way they would spin up an AWS or Azure instance.

We mix bare metal spun up this way with Open Stack VMs, depending on the requirements. And slice up into containers using LXD when that makes sense.
In my experience, Russia had a decent healthcare system in the Soviet era. Care was (obviously, I guess) pretty much free. Most physicians were female. And most of them were apparently driven by moral conviction.

The US was rather a shock for me. Costs were mind-boggling, and most physicians struck me as jerks. At least, the male ones did, and they predominated. Nurses, on the other hand, generally seemed OK.

Somehow the US healthcare system seems to attract jerks for physicians, and they seem to be mostly in it for the money. Not all of them, obviously. But enough to set the standard.

I have no clue how that happened. Or how to reverse it.

Edit: Some might ask why being "in it for the money" is bad. I mean, that's what "free enterprise" is about, isn't it? But think about it. Is it OK for priests/minster/rabbis to be "in it for the money"? Or politicians? I hope not. And then, why physicians?
Yep, no one likes Spotify. No one likes Slack. People are just putting up with them. Except not really, a few loud mouths complain, most users are totally happy.
Before writing any code you should seek to deeply understand the problem space of authentication and authorization. HIPAA compliance is primarily an authorization problem, not an authentication problem. That is: both are important, but the unique set of challenges within the scope of HIPAA have to do with authorization of read/write access to data, not authentication.

Authentication asserts identities. Authorization asserts capabilities. This shifts and compartmentalizes the problem somewhat. Almost all interactive applications need to support robust authentication, but most applications do not require the sophisticated authorization restrictions HIPAA demands.

Whatever it is you choose, you should:

1) Use a mature, reputable library;

2) Use a library which provides the simplest possible interfaces for solving your needs in the most turnkey manner;

3) Engage with a reputable consulting firm specializing in HIPAA compliance and application security.

I would also recommend reading through as much information about Aptible's architecture and design ethos as possible. They have done an excellent job of navigating this problem space.
It's still a common meme that on modern phones the baseband has full access to whatever it wants. The available evidence (which admittedly is very scant) and common sense suggests that this is not true, not in iPhones or common chipsets used in Android phones.

It may have been true on older phones with simpler system architectures but you're really going to need some new evidence to show the meme still holds true.
Reverse for me, because the former is at least providing features that give some value; even if not for me, then for some users people, and who knows, maybe I'll be using them in the future. Electron is pure unadulterated waste. And since the app isn't "bloated", by not including a calendar and a kanban board, I might need to use another Electron app for calendar, and yet another Electron app for kanban, and then I have to throw out my computer and buy one with more RAM.

This is not a dig at you specifically, but Electron (and to large extent, the whole modern web) makes me think that some developers believe theirs is the only software users will run. But users run many programs simultaneously, and all this unnecessary bloat adds up, resulting in frustration, lost productivity, and unnecessary quick turnover of perfectly good hardware.
If the only access you have to a price list is through a private comms channel, what guarantee do you have that you are receiving the same prices and service for a given price as someone else?

If the prices were available through a centralized third party (government health agency or similar) then sure, it's not much of a difference, but if the only way before was by directly contacting the hospitals, then it being available online is a big difference in the actual "public" nature of the information.

Also, calling or writing snail mail to multiple individual hospitals for price lists is a barrier in 2018 that not only dissuades, but is possibly physically not viable for affected people.

In my opinion, being posted online is rightfully the baseline for information to be considered "publicly available" (but probably not sufficient) today.

My heuristic is if you can't find out a piece of information by visiting a public library within 5-10 minutes, it's not public information.
you can also blacklist existing tokens - but that's not without it's own drawbacks https://auth0.com/blog/blacklist-json-web-token-api-keys/
How is that different than any native app? All native apps have that issue.
The synchronization is taken care of by Dropbox and I'm only making commits from my laptop so I'm not really merging from other repos.

Putting a git repo inside Dropbox is discouraged though as conflicts may arise.

You could also for instance publish your data directory to github, accept PRs and everything else, as soon as the files on disk change Notable detects the changes and updates itself.

I'm not sure if that answers your question, let me know if it didn't.
>Presumably, this is based on ICD10 codes... but there can be 30 different services tied to a code. You still won't know what code is being charged until after the service is rendered,

This is not the case in CA. Chargemasters have already been public since 2011, and they list everything the hospital will charge for.
It'd be really great if you could use something like Nextcloud for sync, instead of proprietary services.
Exactly. It should be illegal to charge different patients different prices for the same service.
blame HN, I didn't format them as code blocks. I put #.<space>text<cr><space><space><space>text which in any other context would be text not code
Spam has been solved by Bitcoin and email. It's called Proof of work.
Obat Kutil Kelamin Di Apotik Kimia Farma K24
How the Netherlands Feeds the World (2017)
If you're not experienced at it, it's easy to make exploitable mistakes. Most of those have been identified, and avoided, in standard auth implementations.
To hold, yes you're right. I suspect you're thinking of the storage of value use-case?

It is a way to transfer value. I'm from the Philippines and I'm seeing increasing usage in remittance or getting paid salaries from abroad.

I also get a better feel for what else bitcoin is doing with this podcast episode "Alex Gladstein on Why Bitcoin Matters for Freedom" https://pca.st/aQy0
Please stop using average. Median is a much better measure.
I go a step further and turn off all notifications. I’ll just periodically check the Phone app to see if anyone called & call back.
They even added some kind of spreadsheets to Notion :S
I like to see when title mentions the country. National news websites typically don't include the name of the country, which is a definite inconvenience on global communities like hn and some subreddits
No mention of why GSM 2G was made less secure than it could be and what current policy makers could learn from that.

https://www.aftenposten.no/verden/i/Olkl/Sources-We-were-pre...
Is MNC primarily an acronym used in India?
Actually, sugar does not cause hyperactivity in children. As soon as you double-blind the people evaluating the children's activity levels, no one can tell which children had sugar.

Here are some links to the research:

https://www.webmd.com/parenting/features/busting-sugar-hyper...

https://www.psychologicalscience.org/uncategorized/myth-too-...

https://en.wikipedia.org/wiki/List_of_common_misconceptions#...

The reason most people have this misconception is confirmation bias. Children are almost always eating sugar, and almost always "hyperactive".

If you still don't believe me, (I'm sure _your_ children are different), do your own study. It would be a fun thing to do with your children, and very easy. It's very important that make it double blinded: https://www.verywellmind.com/what-is-a-double-blind-study-27...

If you're right and your study shows it, you'll overturn a 30 year scientific consensus, and probably become internationally famous.
My mind went straight to Cold Lazarus, the sequel to Karaoke, by Dennis Potter. Reality Or Nothing! Poor fucking pig. I hope it stayed comatose and didn't dream. You can still feel pain from injuries in your dreams sometimes.
I guess they mean that there is still the gap between molecules and perception. There is no concept for pain and thus no explanation of how Ibuprofen changes the perception of pain. That said, how do you exactly point out that an explanation is not sufficient? It's like describing a hole, you can only point at the borders.
Not yet you aren't.
No it doesn't. No they aren't.
The reason I care is because effectively node is imposing it's standards on the browser. Effectively node is requiring all browser based modules to use .mjs even though they shouldn't have to care. Except they will care because they'll start with .js, the make an npm package, then someone will want it to run in node, then it has to be renamed .mjs, then all non node projects are effected only because of node's chosen solution. It seems bad to me for node to effectively bleed it's problems on the entire JS ecosystem
There's nothing in this ruling that requires the price list, even online, to fit within your heuristic.

The hospital could choose to place the price list at a url of blahblahhospital dot com / 3424kjfksm34. And to get that URL, you have to call the hospital and ask for it. There is nothing in the rule going into effect on Jan 1 that says they have to plaster the price list on their front page or on Google.

For that matter, they still could give separate price lists to different parties, as long as said price lists are 'online' (eg price list for you is at our_prices dot html, whereas someone else's price list is at our_other_prices dot html).

And, beyond all of this, is the fact that even if you do get access to the price list, it is meaningless to you as a patient. The article discusses this. As a patient, if you want to know an actual realistic estimate of your costs, the only way to get that is to call/go into the hospital and ask, or to go through your insurance company estimator, both of which are already available and aren't changed by this new ruling.

Your points are all legitimate and ones I agree with, but I just don't think this new HHS rule does anything to meaningfully address them.
> It took me a long time to realise, but these people really do believe in bitcoin/blockchains.

Best. Comment. Of. 2018.

Especially since "these people" include some ostensibly smart cookies.

I conjecture that these people were/are trying to elevate BC to the level of adtech (Google).

Perhaps we have averted another black hole for the greatest minds of a generation.
Personally, I forget everything and it bothers me a lot. Do you take any medication or suppliments?
most doctors in the US actually do not know about the prices of treatments as it changes based on insurance administrator/insurer, and then what the patient pays also have huge variability based on insurance administrator/insurer.
Ground speed (which is what inertial system would indicate) is not very helpful for the pilot. All piloting relies on airspeed which is how fast the aircraft travels in relation to surrounding air.
They say it because as a development exercise it is both seductively attractive and very dangerous. Furthermore, almost no one's authentication problems are unique or unsolved.

There is approximately never a good reason for a team to roll their own authentication solution from the base primitives unless that's both their core competency and their product differentiation. It offers virtually no upside for virtually certain downside.
You certainly can under HIPAA, and I’ve done this several times without unreasonable delay. If you’ve had issues, I’m sure the “sternly worded letter from a lawyer” approach would get the gears turning.
... that my experience is consistent with the others stating RPIs can be reliable with sufficient power supplies.
I think you limit them if you don't cast blame at all.

Obviously failures of process are interesting but sometimes it's because someone at the company fucked up.
That explains, thank you!

I have installed and using it. I have a feature request: Dark Theme.
Ah sorry I misread. And that could be the case but I see a net positive from it. They might do enough to get theirs and then once they flatline it becomes someone else's opportunity.

For example Bezos might have had enough from just being the bookstore of the internet. Everything else Amazon does would be open to small business fighting it out.

There are still shareholders for public companies to please so just hitting the mark might not mean just stop innovating.
Not quite the same. iTerm provides escape sequence to inline base64-encoded images in a common format (e.g. PNG)[1] whereas Sixel is an it's own image format.

I find iTerm's approach is more simple yet more powerful: better compression, thus faster; no dithering, thus better image quality; it's even have GIF support. Sixel is an 30 year protocol designed for matrix printers, i'm not sure why we should stick to it. I think terminal emulators should adopt iTerm escape sequence rather than Sixel.

Aside of iTerm, image inlining is supported in Terminology[2]. Not sure about compatability with iTerm however.

[1]: https://www.iterm2.com/documentation-images.html

[2]: https://www.enlightenment.org/about-terminology.md
Watch these Oscar-shortlisted animated short films to boost your day
Frameless, foldable, 5G: smartphone trends 2019 – FrontNet
Some immutable data structures must be implemented strictly, others lazily.

There are known algorithms/data structures where you either have to use immutability or laziness in order to get an efficient implementation.
3 Nama Obat Kutil Kelamin Paling Ampuh Di Apotik
That's exactly the trade-off. I'm not going to say it's a big enough negative to dismiss using the stateless signed token scheme because it depends on the needs of the application.

But either way, if you really can't afford a database or cache layer lookup to see if a token is still valid, then you accept that by using a bearer token, that is only validated by signature alone, that it is possible a user will have their session hijacked without possibility of revokation.

The usual way this is mitigated is by use of a small expiry time (I've commonly seen <=5 min) and a revokable refresh token. This still gives a hijacker a possible 5 minutes (assuming 5 minute expiry) if a user revoked the refresh token, but it does mitigate the damage while still reducing DB lookups since you only do a lookup in token refresh. Hope that clears things up. Again your application needs should drive these decisions.
Didn't write this but thought it was interesting as it seems to address pain points I've felt when building out a typed actor system (requirements for adapters, etc)
I see your point of view, but also if you absolutely don't need a kanban board and other such features the app becomes more difficult to use. Regarding the RAM as long as there's enough available I think it makes no difference performance-wise if I have 5gb or 2gb free.

From my point of view as the developer of the Electron app in question I get to reuse the components I spent considerable time developing and a cross-platform app almost for free.

Btw for this specific case Electron might not beed too bad of a choice RAM-wise, I checked it earlier the RAM usage of Notable and Evernote and amazingly Evernote, which is native, was using about 100mb more on my system (mid-2014 MBP). Maybe partially because at the end of the day you're going to need an HTML renderer to render those notes anyway.
Gaming
Get ready to play.
You can disable edge and 2g on most modern phones.
Very excited about this. My Evernotes include many web clippings. How does Notable import those? Any chance you’ll add a web clipper?
I'm sorry guys. I'm using Wix. Been putting off moving to a more performant platform, its probably time.
I do the same & WhatsApp is the answer for me. I am considering ditching that because it’s the last thing I use that is owned by FB though.
Huawei Had a Deal to Give Redskins Fans Free Wi-Fi, Until the Govt Stepped In
That is indeed a great question. In general, I have found out that people are extremely inventive when there are profits to be made.
Yeah that's actually in my todo list [1]. If I can find a dark version of the CSS GitHub is using for Markdown files it should be easy to implement.

[1] https://github.com/fabiospampinato/notable/blob/master/.todo...
I'd love to use this app for editing Hugo (or just any static html generator) content pages.
I would assume that our drive to see intent even in happenstance is older than language. But yeah, highly speculative. Sapir & Whorf would disagree :-)
I posted a PDF of the content here: https://drive.google.com/file/d/1M1o8IW-dV4fEeLeLDWeMgsVw4DN... in case its useful.
My solution is to play along with the pitch, taking as long as possible with my answers, until they ask for my credit card number. Then I make up 15 digits, making sure to mess up a couple times along the way.

Then I ask whether they have a do not call list.
Particularly with Docker a lot of security can now happen at the OS level. This is great because it requires no changes to code, particularly for super legacy apps where there simply is no way to secure say PHP 5.4.

HTTP Security Headers. These are big. There are 8 or 9 of them now. Content Security Policy especially.

GeoIP Blocking. Also this is big. I think AWS WAF lets you even filter down to the state level now if you want. This dramatically reduces the open ip space you’re exposed to. Easy to circumvent yes, but still large benefits.

4096 SSL keys. Also would disable anything below TLS 1.1 (TLS 1.2 would be better).

SPF, DKIM, and DMARC records for DNS address.

IP Blacklists. Lots of known malicious IP lists you can download daily and block with IPTables. If you’re using Docker, you can block via Apache mod_rewrite and a fast look up dbm file (convert from txt to dbm via httptxttodbm tool).

ModSecurity. A pain to setup sometimes, but it’s not bad. Just enable a few options and you’re ready to go.
Bleh...I know. Wix. Need a better platform. Sorry its hard to work with.
Aye... see thread, Sorry for the issues.
> The biggest is going to be utilisation. Combining workloads pools variance, meaning you can safely run at a higher baseline load.

Utilization is arguably the biggest benefit (fewer nodes if you can share nodes among users/workloads, fewer masters if you can share the control plane among users/workloads), but I wouldn't under-estimate the manageability benefit of having fewer clusters to run. Also, for applications (or application instances, e.g. in the case of a SaaS) that are short-lived, the amount of time it takes to spin up a new cluster to serve that application (instance) can cause a poor user experience; spinning up a new namespace and pod(s) in an existing multi-tenant cluster is much faster.

> But I think that can be achieved more effectively with virtual kubelet .

I think it's hard to compare virtual kubelet to something like Kata Containers, gVisor, or Firecracker. You can put almost anything at the other end of a virtual kubelet, and as others have pointed out in this thread virtual kubelet doesn't provide the full Kubelet API (and thus you can't use the full Kubernetes API against it). At a minimum I think it's important to specify what is backing the virtual kubelet, and what Kubernetes features you need, in order to compare it with isolation technologies like the others I mentioned.

Disclosure: I work at Google on Kubernetes and GKE.
That's a very simplistic view on the issue.

Most businesses do not have a constant workload 24/7, which means the ability to scale up and down will save more money than reducing the overhead of not running directly on metal.

There is also the cost of having to care about hardware to begin with.

Also, in the big picture, having 100 companies doing their own bare metal deployments is not terrible efficient, compared to 1 company doing that and 99 paying the first company for this service.

The list could go on, but I think you get my point.
The syntax kind of looks like Scheme to me.
Agree that Windows works out of the box far more often than Linux, the reason precisely being what you said, that hardware makers do not release drivers for Linux for the most part, or even enough specs to write one without buggy reverse engineering. The situation is getting better but rather slowly. And when new hardware comes out, we go right back to square one again.

But when Windows does break, the troubleshooting is, in my experience, even more obtuse than with Linux.
While I’m glad someone found a way to turn money into happiness, this feels like the Black Mirror future of the gig worker economy.

“We need a map of Kansas City using devices we provide you. We pay nothing up front, nothing at completion, and no residuals for profits we earn from your imagery. You may not keep the equipment we provide. You are responsible for all expenses.”

Who on earth would accept that Taskrabbit?
There's as much need for a "measured approach" for unsolicited marketing calls as there is for fighting polio. That is, both need to be eradicated from the face of the Earth.
I could make a web-app out of it, but it's a non trivial change which I don't personally had the need for, so I haven't implemented it yet.
What’s the logic in that? If the cost is socialised surely you’d expect more people to seek care than if they were paying?
Yep, to reuse the math analogy. C is like solving 3d geometric problems by manually aggregating endless lines of cos, sin and sqrt, instead of using vector mathematics where you can do the same with just a single line of matrix multiplication or a simple dot-product.