skysight-inc/HackerNews huggingface dataset:
>A lot of people in the tech community and on HN sympathize with the ideology of people being deplatformed, particularly regarding alt-right and "anti-feminist" views

In other words "a lot of people in the tech community" are alt-right and anti-feminist (and thus, implied, bad people with bad ideas), but weaselly put.

How about, "a lot of people in the tech community" sympathize with people being deplatformed, period? (Ever heard of the EFF? The story of the Pirate Bay and its support? DeCSS? Support for Assange?)

Sure, this which would still include people being sympathetic to "alt-right and anti-feminist". Do people have to follow your particular politics and ideological preferences wholesale to be acceptable? Perhaps those are just pure truth, and everything else is evil?
Dupe: https://news.ycombinator.com/item?id=18766769.
Overall, flying is safer now than in the days of manual control or more simplistic autopilot. The problem seems to me to be that when things do fail, the cause and effect may not be obvious to the crew so they struggle to understand why the plane is doing what it's doing, and how to correctly respond.
The whales that don't get whaled will get starved, sharked, or killer whaled.
It has been upgraded to Grails 3. I can't speak to the wider Groovy and Grails recent trends(I know they have been trending down in recent years), however Grails development seems to be picking up a bit and I'm certainly going to be dealing with it for the foreseeable future.

VS Code's Java support actually works really well now with a few rough edges based on a mostly Java project I was working with today. Unfortunately even when components are largely Java, a lot of testing and build scripting(Gradle) will be in Groovy. The terseness is nice for sure.. But it means leaving VS Code for IDEA.
I think there is less intelligence in the system than that. I get a lot of robocalls in Spanish, a language I do not know. (and other than living in California, there's not a lot about me that would suggest I know Spanish?) I mean, it is a small portion of my robocalls, but it's still several a week, when I answer unknown numbers.

But, I get a lot of robocalls; 3 calls a day is light. So clearly, some people get more calls than others, I'm just saying, I don't think the filtering criteria is particularly smart.
I have been using JWT[1] since it's initial push as a mainstream authentication method. There's plenty of libraries that support it and make it easier to use[2]. There's even 0Auth[3] that is a company based around offering authentication services. Simply check for a valid token in the Authorization header, check out the introduction [4].

The library I've linked brings up a good point to make sure that you know the difference between decoding and verifying the token, but after that it's fairly plain sailing.

[1]: https://jwt.io
[2]: https://github.com/auth0/node-jsonwebtoken
[3]: https://auth0.com
[4]: https://jwt.io/introduction/
FWIW, this isn't what I observe.
Nice, but by the time you want to do this, why not use a GUI file explorer with image thumbnails
Except republicans and bush passed a law a decade ago saying the government can't negotiate drug prices for Medicare. It's beyond stupid and the main reason you see so many niche drugs go up 50x in price overnight lately. The companies have figured out they can exploit that law this way.
BankID should be safe, as the communication can be secured by other means like HTTPS/TLS (assuming it's still an app/applet -- haven't used it in many years).

The article is about the basic communication between the phone and the cell tower, which has other issues.
> you're really going to need some new evidence to show the meme still holds true.

Uhh no, that’s not how security assurances work.
Revoking a bearer token is trivial and in all likelihood, revoking tokens is a very infrequent event. In most cases it is such a rare event that you can usually commit your blacklist to source code.

If not a service to validate tokens against a blacklist is again trivial and will scale to all but the top 0.1% of organizations. And it only needs to be in the blacklist long enough for the period until the token expires.

Yes, jwt is not ideal. But this talk that you should never ever use them and your service will be immediately hacked etc is silly internet bandwagoning.

For a huge percentage of services jwts are just fine. Anyone reading this, please do not over think this advice and just ship with jwts if that is what you have.
Also even media leaves out the poor who can't afford expensive procedures. It's why Obamacare is ultimately doomed to fail too.
I would like to see this solved via a little regulation and tech industry cooperation that basically discards the entire phone system.

Problems that need solving

* Robocalls

* Companies using SMS for 2FA

* Companies still using phone numbers as part of my ID all. I'd much prefer companies contact me first via email/secure-text (whatsapp/line/messenger/...) and only later via secure voip

I feel like Google/Apple/Microsoft/Facebook whoever should basically design a new standard to replace the phone system and the government should then mandate that companies must support it (no more asking for phone numbers)

I'm sure there are lots of issues. I don't want one id to reach me, like email I want multiple IDs and if you want to know the ID I give you is me then send me a confirmation (I can crypto-sign it if need be)

I'm sure it's easier said than done but it does seem like it's getting to the point phone numbers are basically as useless as fax machines. Most people call me via Line, Hangouts, FB, Facetime, etc.. No one calls via phone number
Yes, that's patently false.

The exp payload field is even specified in JWT's RFC along with the token rejection workflow.

https://tools.ietf.org/html/rfc7519

The same document also specifies the jti field which is the JWT's nonce.
I spend 2-3 days around the holidays to revive an old HP laptop with a Debian desktop distribution. I had problems with hibernation / suspend, but what was the show stopper for me was that there is still no smooth scrolling on Linux. [1]

1: https://www.reddit.com/r/linux/comments/2qd564/why_no_smooth...
Impressive. Even with Erlang’s robust platform that’s no small feat.

Have you written anything about it?
Thanks.Dont be too harsh on yourself. You had to start somewhere. I lookforward to your new and improved articles in the New Year.
In what way?

You simply get a bearer token (non JWT) onto the client and use that from local storage instead of a cookie.

Your JavaScript code then makes api calls using the same bearer pathway as other api clients.

The token can still expire, be revoked, etc. it just prevents you having to handle cookie auth on your api.
p50 would be the median, surely?
and then strangle the parasitic insurance companies that are paid handsomely by the consumer to build pointless bureaucracy and safeguard their market position
The Indians have better cardiac surgery outcomes. I don't care about anything but outcomes. It's no surprise, though. Their guy has done 150 surgeries in the last year. This guy has done maybe 40. No good. If things are so much better here, why are outcomes not as good? IMR, MMR, even with companies that have comparable or stronger definitions.

The evidence is constantly against US healthcare except for experimental or rare treatments. The doctors aren't any worse, surely.
Google FamilyLink: Help your family create healthy digital habits
What’s the logic in that?

Am I going to get a quad bypass just because it is cheaper?

People seek care because they need it. The kind of care that people use more because it is cheaper/available is maintenance care (which reduces overall costs because things are often treated before they become critical).

The first time I heard “I am feeling sick / cut my hand / need stitches but I cannot afford to go to the doctor” was in the US, and it left me dumbfounded - I have lived in a few places, and that’s a US only thing.

Also, I could understand some of George Carlin’s jokes (e.g. “dirty doctor” one) until I had lived in the US.
A semantic point: a stenographic transcript is a recording, just not an audio recording. Furthermore, court stenographers prepare the final transcript from an audio recording, and setting up and controlling the audio equipment to record court proceedings is one of the court stenographer's duties. Their in-court duties do, of course, include reading back statements made moments ago, which is much more practical to do from a page than from a recording, hence why voice-to-text software today and steno machines previously are so closely associated with court stenography.
ShinyCore – A PHP framework to build ADR applications
Applying the principle of social proof in building persuasive designs
Actually, In Chicago, with drill music, the murderer and the person who wrote the lyrics are sometimes one in the same. But even when they aren't personally murdering someone, often their 'hitter' is. And the music's gang-specific nature actually encourages 'beefs' over territory which quickly become violent. The music is literally crafting violence, by being the dog-whistle of gang politics.

You can see parallels with white extremists that write racist screeds, and later go on to commit violence themselves, or when their writing inspires violence. One former white supremacist who was the leader of a popular white supremacist punk band admitted he knew there were people who committed violence and quoted his music as an inspiration, which in part helped him leave his old views behind.

To paraphrase Bob Dylan, music can't keep a revolution going. But it can and does encourage people to act.
You've just described the JWT workflow.
Average can be the median or the mean. Usually the government reports median when they say average.
Here is where I got mine from https://www.biltema.no/bil---mc/verkstedsutstyr/lofteutstyr/...
Top Coub Video 2018 #191: Best Jokes Pack Videos FunnyCube
By "intrinsic", I meant precisely that there is no JWT standard which admits native revocation. It naturally follows that no JWT implementation provides a turnkey solution for revocation, because it's not intended to.

JWT is stateless. Revocation is stateful. This is a fundamental tension in both cryptography and access control. Yes, you can retrofit your stateless authentication system with a stateful revocation system. But at that point you're back to square one and the architect working on this should consider why they're undoing the legitimate benefits JWT provides.

Nonce based revocation is an active process. Timestamp expiry is not actually revocation, it's expiry. If your token is compromised prior to expiry, you're out of luck.
California has always shocked me with the amount of trash I encounter on the highways. It's completely different from where I grew up in the midwest, not all of America is like that.

It's part of why I stopped riding motorcycles. There was far too often substantial hazardous objects like building materials or furniture littering the streets. I presume it was all falling from improperly loaded vehicles, perhaps people underestimating the effects of hills.

I've observed a lot more negligence and incompetence in general with Californians. There's a combination of extreme carelessness and lack of ownership for one's (in)actions, I'm not sure how to describe it, but it's very apparent after living here for over a decade. Everything is someone else's problem, maybe it's just the ubiquitous self-centeredness Californians are known for.

In any case, it doesn't make for a population that cooperates on keeping the place clean. The state would have to spend far more than other states to clean up after its residents enough to be kept comparably tidy. These people simply can't be bothered about anything other than themselves.
They know how it works but not the exact price of an aspirin. They can't exactly tell you to go to the pharmacy out of your hospital bed to get a $2 bottle vs a $50 pill from them.
Are you saying you know how to spend the money these people earn better than them?

Or, to force you into a false dichotomy, are you saying that back when hotdogs cost $0.05, increasing the minimum wage from a few pennies an hour two $2.00 an hour made all the difference in the world?
gpbenchmarks.org ?
What about mobile apps ?
what specific measurements are you taking, besides common methods and techniques. How are we save guarding apis consumptions. And most importantly reverse engineering techniques.
One important component of free speech is the right, not to be heard, but the right to hear. That is what is being taken away from me and I find it terrifying, even though I'd never heard of any of these people before they got unpersoned. The idea that by handling some financial transactions Patreon or PayPal is somehow supporting some kind of speech is a disastrous one. Starbucks doesn't get to ask you your views before selling you coffee, nor should any of these other companies.
It's wild that shops in the 80s were already taking application development more seriously than some shops are capable of doing in the present day.
https://wakingup.com/ and https://www.headspace.com/ are both woo-free choices I'd recommend.
I don't think I forgot to mention that, I used a hyperlink to point to it instead. As a guy who loves chess and has studied it off and on over the years, I doubt I'll ever win a game against a grandmaster under any circumstances, so it still seems impressive to me.

But even I know enough, from watching videos on YouTube that analyze some of the AlphaZero vs. Stockfish games, to appreciate that AlphaZero was playing in a style I haven't seen before. What's the threshold for someone serious enough to write a chess article?
If the autopilot tries to screw things up it is standard procedure to turn it off. Is failing to do so is human error? I guess so.
They know in generalities how it works, but I doubt that most doctors in a hospital setting can tell you how much a particular procedure will cost you.

Even my dentist in a private practice often doesn't know "Well, we'll bill this to the insurance company, but they might not cover it all so we'll have to bill you"
Ipfs/roadmap
It's easy to fake the "caller-ID" field, but this doesn't fake the ANI: If it did, you could call 1-900 numbers and bill the White House.

You're right about there being a lot of little legacy problems though; The issue I see is that the carriers aren't on the hook for it: They've made it so cheap to call someone these scammers simply need to find people whose time is worth less than mine.
Share history reading list from me
Interview w/ the CEO @ https://www.youtube.com/watch?v=hS5_D0bxLWI ... can someone explain he mentions the display is semi stable + lasts "one hour" does it need to refresh 24x @ some point to hold an all day display?
Is that the goal? Of the ad departments of meat companies maybe lol
Ironically, the company mentioned in the article for spreading disinformation has the following mission statement: “New Knowledge protects your brand from social media disinformation by identifying fake accounts, fake news, and propaganda campaigns.”

Why choose white hat or black hat when you can profit from both sides. Ingenious!

—-

“The money went to a small group of social media experts that included Jonathon Morgan, the chief executive of New Knowledge, a cybersecurity firm.

They created a Facebook page intended to look like the work of conservative Alabamians, and used it to try to split Republicans and promote a conservative write-in candidate to take votes from Mr. Moore.

They also used thousands of Twitter accounts to make it appear as if automated Russian bot accounts were following and supporting Mr. Moore, according to an internal report on the project. The apparent Russian support for Mr. Moore drew broad news media coverage.”
> Yes, jwt is not ideal. But this talk that you should never ever use them and your service will be immediately hacked etc is silly internet bandwagoning.

I never said you should never ever use JWT or that your service will be hacked if you do so. In fact, if you kindly reread what I wrote you'll see that I explicitly mentioned there are legitimate use cases for JWT. I am specifically refuting the use of JWT as an authenticated session management system.

> Anyone reading this, please do not over think this advice and just ship with jwts if that is what you have.

This is poor advice.

1) Authentication is sufficiently solved for most workflows and applications that you can use turnkey solutions for more secure and more performant authentication than JWT.

2) What exactly is the scenario you envision in which JWT is all someone has? Do you mean they're forced to use stateless session management, or that JWT is literally all they can do for authentication because nothing else is available?
“I have cancer and I went to the doctor and they gave me painkillers” is a non-US/EU thing.
Framing the question in terms of "rights that people have" obscures it, because "rights" is an answer for the question of what people want and what compromises they can achieve.

To map the space of possible compromises it is useful to think (1)"what would i do if the roles were reversed", (2)"does the opposing idea leave any space for compromise or should it be forcefully eliminated", (3)"is the opposing party weak enough to cheat and not give the treatment you wouldn't want to get in its place".

I think most of us would agree that (2) should be rulled out unless the opposing idea is itself violent, (3) is unfair and also dangerous if the opposing party is stronger than it seems.

If we agree on the above then from (1) a reasonable compromise is to allow reprehencible people to say their non-violent reprehencible things in exchange of us saying things that are reprehencible to them.

Coming back to the Freedom of association for platforms,
we should consider that the value of these platforms is largely in the people using them, so in a way they belong to their users, and don't have much choice.

Many people think that the platform they use should be reliable and therefore not be able to randomly decide with whom it wants to be associated.

But many people also think that some reprehencible speach should be banned.

If platform decides to not be neutral and take the side of the second group, it makes a bet that the first group and the banned group are not powerful enough to compare with the second group, and moves stakes away from compromise towards play on elimination. It may succeed but a pushback from the banned group and large part of the first group is entirely natural.

I hope that i managed to convince you that the position taken by the first group is more rational, as it leads to a more stable state.

And if a platform absolutely has to take sides because second group of their users is too large/vocal, it may be better to do that by means that leave some space for a compromise. E.g. display a red badge near the name of disassociated users or display green for good users.
That's not what parent said. Sure, they arguably "know how pricing works". Their staff (or at least, their data systems) know about each patient's insurance. And hopefully, what physician services it covers. But I doubt that physicians themselves know that stuff. It's not what they focus on.

In my experience, staff generally know how to code referrals for lab work and specialists so patients' insurance will cover it. But sometimes they screw up. So for example, I've been prescribed a testosterone supplement. But insurance won't cover testing for blood testosterone, level unless they use the right diagnostic code. Also for prostate-specific antigen checking. They have to code "enlarged prostate" in order to have it covered. There's another code for routine testing, but it isn't enough.
This isn't necessarily the case with my situation. There was only one hospital for where I lived in Marquette, Michigan. My mental healthcare was pertaining to gender dysphoria and not depression which I think you're associating with longer winters. Anyway place I grew up was filled with religious nuts to make things short. They forcibly prescribed me with antipsychotics while ignoring my right & modern medical approach of gender dysphoria. Montreal is a large city compared to that place and is progressive like California. So basically where you're located when it comes to social structure is huge.
The last few times I've had to edit a PDF I used xournal.

I haven't used any proprietary tools on other systems to compare, but maybe it's satisfactory. It's worked fine for what I've needed to do.
I can think of a few rewards. Being the first to do something is personally rewarding, but the notoriety is also totally bankable.
But if something goes wrong (which sounds very likely at some point in such an imprecise operation)? That'll be a helluva existential crisis situation.
Are there really towns and cities that look like the generated maps in the readme? As a European, the maps look completely alien; but perhaps this looks like a US city?
> You can still revoke JWTs if you give them an ID and keep a revoke list somewhere.

You don't need the ID. You can simply store the token's signature. In fact, some implementations store the whole JWT to avoid roundtrips to the auth service, and revoking the token is just a matter of flipping an attribute in the database.
I have a similar setup at the moment (without tmux). One thing I noticed w/ mosh was that copy pasting an input from advent of code (a few hundred lines iirc) caused mosh (?) to hang and I had to restart blink. When I tried copy pasting via ssh instead of mosh it worked.

Any idea why this might be (I’d be curious if that was to be expected re how mosh works or whether it might be fixable) and alternatively how I can work around it (instead of fetching the content from a web page via the remote server?).
Again, expiry is not revocation. This is an uncontroversial fact - if you disagree, please advise me as to how you'd revoke a token prior to its timestamp-mandated expiration without augmenting it further.

And the jti field is not intended for what you think it is. Anti-replay is not at all the same as revocation. Those are different things entirely.

I certainly believe (and have seen) the jti field used in the manner you describe. But no, that workflow is not intended for revocation. Which makes sense given the design intentions of JWT, because anti-replay can be accomplished as a stateless process, while revocation cannot.
I maintain this is a flaw in the Airbus UX. When they get conflicting inputs they silently average them.

Boeing uses force feedback so the two pilots are aware that something is counter-acting their input.

I really don’t think the Airbus strategy is defensible - certainly not when the two inputs are far apart!
“We started out by building a prototype, and on top of that prototype we tried to build a product.”

Sums up many projects early in my career. I think this should be a must read for anyone whose job involves managing a software project.

I’ve personally witnessed every major mistake listed in the first twelve pages.
> sadly sighing and talking about how disgusting I am for wanting a world without Nazis isn't exactly going to shame me into changing my mind, y'know?

Would you please stop posting to Hacker News in the flamewar style? I'm sure you can make your substantive points without aggressive snark and internet shaming à la Twitter. Please do.

https://news.ycombinator.com/newsguidelines.html
I’ve got to say I’ve been very impressed with JMAP using it with FastMail for a few years now. Well done to the teams involved.
"You can’t put the genie back in the bottle"

You can though. You can do whatever you want! Although you can't unknow something, you can choose not to do it
Will EOS Overtake Ethereum?
Uống sữa đậu nành như thế nào cho đúng?
Which is fine to use the same logic, as it’s a robust, easy to understand system. but if you aren’t using JWT then you aren’t using JWT.

The parent comment saying “that sounds like JWT” is implying it’s just as bad or has the same shortfalls as using JWT.