skysight-inc/HackerNews huggingface dataset:
Ask HN: Password Security for Older Folks?
I recently noticed that my less tech-savvy folks are using the same password across multiple sites. I'm trying to think of a password system that would be easy for them to use. To contrast, I use keepass with a yubikey; something that I think would be much too complicated for them.
Any suggestions for a password solution for elderly folks?
I use voicemail for that, I still get alerts for a new voicemail, and often the scam calls will just move on when there isn't an answer, or you can listen and it's pretty easy to tell if it's legitimate
It seems they do their scheduling like they do their seating... it is all Free for All
Only because of his follow-up tweet -- his first tweet ("Epic thread") was fully ambiguous. He knows better (after all, he owns the platform) so he's also willingly trolling by not being clearer.

That said, the media response to it -- pumping his first tweet without clarifying by virtue of the second tweet -- is emblematic of everything wrong with our current news/media/social-media culture.
Pretty sure that’s actually a significant amount of people.
if, and if you trust it to be made easily accessible, yes.
Yea, the predictions of someone driven by passion (in this case, a passionate dislike of Musk it appears) probably aren't great in general. But, below $100 seems reasonable - the stock could still be considered 'overpriced' in the current market (at least by P/E).
The month input could be a drop-down with a three-letter abbreviation for the month. That would eliminate the need for a label.
> These operations have to be sponsored by the state at this scale.

I'd argue that one such state is the U.S.

Congress could pretty trivially order that carriers give each customer a choice about what kinds of spoofed / unreliable-origin calls to let through.

E.g.: For calls originating (inside | outside) the U.S.: (allow-all | allow-whitelist-only | allow-only-when-presenting-callee-issued-passcode | etc.)

But Congress doesn't do this.

This isn't exactly Congress sponsoring this behavior, but I suspect there's some bribery and/or unsavory lobbying going on.
Are there any airlines that haven’t had similar problems over the last 5-10 years? Seems like they’ve all had issues. And if they haven’t, it’s just a matter of time.
> You don't need to market to developers, a good product only needs three things

How do you find it, though?
In most cases it was. But the 15 seconds that would get distilled down for the short cable news attention spans didn't usually include it.
Absolute ignorance followed by absolute arrogance. Classic!
Any other company that missed this many release dates / promises / targets would have crashed faster and stronger. There was always the mystique of the genius knows what he's doing, which has unraveled a bit in the past couple of months
It's mind-boggling that the United States allows this kind of thing to happen.

In the EU I get maybe one spam call every couple of months. From the stories you hear from Americans on HN, Americans get multiple spam/scam calls a day, and the vast majority of their inbound calls are spam/scams.

What is going wrong in the US that isn't going wrong in the EU? Language barrier? Regulatory capture?
It appeared to many observers that Musk was mocking the Russian propaganda, he then made the mockery explicit later.

I don't understand the thesis that Musk is somehow pro-Russia. Generally his ventures are against Russia interests:

SpaceX, launched in the aftermath of Russia being uninterested in selling a leftover rocket to Musk, now dominates the launch industry to the detriment of Russia, among other things halting the cash flow from NASA to Russia to carry astronauts to ISS.

Tesla and former-SolarCity, reducing use of oil, while Russia is a major oil producer.

Starlink provides communications capability to the country Russia is attacking.

However, a likely macroeconomic slump in (electric and other) vehicle demand and Musk’s erratic way of running Twitter are real problems. I think these get the blame for stock issues, rather than the bizarre Russian thing.
Wow. Just got citizenship and I was in disbelief. So glad I missed this. Absolutely dystopian to have to submit to a physical for citizenship for any country.
I didn't read the article, but please bear in mind that poor reputation of the primary luxury goods brand ambassador does not, usually, help the brand.
To everyone suggesting to silence unknown callers, most of these scams come through email or text messages, and the victim is tricked into calling the scammer.

Best defense: don’t ever call a phone number you receive in a text or email message. Delete the message and look up your bank’s, Amazon’s, or PayPal’s phone number yourself through the company’s official web site.

Also, don’t get scared by messages about your finances…stay calm. The scammers count on you getting freaked out and doing something stupid.
5x worse on each level, maybe. That composes quite quickly.

Npm packages have really crazy dependency graphs. It's usually on the 1000s of times larger than what you get on most languages, 100s of times larger than python or ruby.
Their point is to identify a unique taxpayer record or a unique social security recipient. They lack a photo, so their utility is limited in identifying a physical human being.

They are, pedantically, "an ID". Just like a UUID is an ID. They're just not the type of ID we're talking about: an ID that authenticates the identity of a human who possesses it.
The problem with services like this is that some automated calls are legitimate.
That’s a good thought. I wonder if there is an aggressive us attorney that could tie the forwarders to the scam with some kind of RICO charges.

(My entire understanding of law comes from law and order so take what i said with a grain of salt)
Some argue that precisely that mechanism generates evolutionary pressure for the virus to mutate so as to avoid being attached to by the antibodies but still being able to enter the cell (maybe through a different receptor, and there exist some viable candidates for this). The fact that such a large population has been vaccinated with mRNA vaccines, it is thought, has created a huge reservoir for the virus to attempt such a mutation because all those people get infected and shed the virus while being mostly asymptomatic or experiencing mild symptoms. New strains should soon appear if this is correct, and some other dire predictions are made in that case (see Geert Vanden Bossche).
I once had an issue with Microsoft at work and had to get MS support to help me. They literally called me on the landline and asked for remote control of my computer. It was totally legit.

Still I felt uncomfortable and asked for a Teams session with screensharing instead (and not remote access), but this 'was not possible'.

So, how are people to distinguish between 'fake' calls and real ones if companies still use such shitty techniques?
If we assume the worst of the maintainer/packager, of course it's no better.

I'm assuming some adherence to these guidelines, otherwise they should be removed from the service:
https://docs.fedoraproject.org/en-US/packaging-guidelines/#_...

A package adhering to this guideline modifying system files, as designed, is not a problem. They are explicitly prohibited from modifying user data.

My point with managers vs scripts is that managers provide some sanity. Not perfection.

I trust:

- a versioned package
- built to the linked standards
- from upstream sources in an offline environment

Far more than I do curl | bash. There is far less ambiguity and I can actually reproduce this exact environment at some point.
I assume in the parent they still accept voicemails. I'm sure your partner would be aware of your policy of not picking up unknown numbers and think to leave a voicemail in this situation.
Let me present some additional sources then:

https://unherd.com/thepost/leaked-slides-reveal-dark-side-of...

> But her organisation’s internal training seminars tell an entirely different story. In a seminar tellingly titled “Accessing Alternatives to MAiD: What is the role of the MAiD Assessor when resources are inadequate?”, Althea Gibb-Carsley, a recently retired MAiD professional in Vancouver, documents several real-life cases of patients who have sought to die because of a lack of housing or of other resources.

> What euthanasia providers don’t say out loud is that a patient who is turned down by one assessor can simply “doctor shop” for another one until a willing assessor is found. In another CAMAP seminar, Dr Ellen Wiebe describes a case of a man who was rejected by a MAiD assessor for the procedure because, as Raikin writes, “he did not have a serious illness or the ‘capacity to make informed decisions about his own personal health.'” But a pro-euthanasia group connected him with Dr Wiebe, a prominent MAiD supporter who was previously accused by a Vancouver Jewish nursing home of sneaking in to euthanise one of its patients (to which she admitted; the provincial medical regulator cleared her of wrongdoing). As she recounts, she performed an assessment online, found him eligible, found another assessor who agreed with her, and drove him from the airport to her clinic, where she “provided for him” or, in other words, ended his life.

> One 55-year-old woman who sought to die “identifies poverty as the driver of her MAiD request – food insufficiency and inability to access appropriate treatments”. The slide (above) points out that “what she really needs” is “an extra $600 or so /month”. Another patient, a 57-year-old man and published author, identified lack of housing and lack of access to medical care among the reasons for his request to die. He had been told that obtaining social housing would take between three and six years; he planned to “stretch credit to the edges then […] set final date” for his death.

https://www.spectator.co.uk/article/why-is-canada-euthanisin...

> Many in the healthcare sector came to the same conclusion. Even before Bill C-7 was enacted, reports of abuse were rife. A man with a neurodegenerative disease testified to Parliament that nurses and a medical ethicist at a hospital tried to coerce him into killing himself by threatening to bankrupt him with extra costs or by kicking him out of the hospital, and by withholding water from him for 20 days. Virtually every disability rights group in the country opposed the new law. To no effect: for once, the government found it convenient to ignore these otherwise impeccably progressive groups.

https://www.msn.com/en-us/news/world/paralympian-claims-cana...

> Paralympian claims Canada offered to euthanise her when she asked for a stairlift

These are just a few quick searches that corroborate what is discussed in the article.
It's unfortunate, because there was more value in the discussion than the obvious sentence he posted, but because I simply didn't curb a word or two, the entire conversation is naught.
I can’t be the only one who is rubbed in a very bad way by Musks moronic tweets. The Mad King’s Twitter behaviour seem more and more trumpesque.
These days whenever I hear Indian voice, I just reject call. They way they target grandparents is surreal. One day they told my my friends parents that their children is in accident and they have to pay in gift cards. It is so distressing to elderly people.

US must take strict actions and call out India publicly. Elderly people are weak, education isn't going to solve the scam problem. Scammers must be punished harsly. They erode the trust in system.

Also, Indian government is not doing anything. In many places like Kolkata, scammers can get away easily by bribing police. Our phone are being redirected to India, and they can abuse our phone number. I wish, the US government passes strict rules and regulations to keep these scammers in check.
Maybe there should be some educational program about these. Or license to have a phone and bank account...
How many degrees of separation are there between cells? Many of them are pretty distant from each other even if they are technically part of the same overall network, we also have to consider the directionality of neuron signalling
I'd be very nervous if I was Cloudflare. They pretty explicitly say that the cookies are not strictly necessary for using the websites.

> cookies are strictly necessary to provide the services requested by our customers

Cloudflare's customers are websites, not users, whereas the latter are protected by Cookie Law / GDPR.

That's exactly why Microsoft was fined (according to [1]):

> Microsoft argued that detecting ad fraud was "strictly necessary" for running bing.com, but the court disagreed, saying that advertising is not a service requested by the user. (point 53 in the full decision).

[1] https://news.ycombinator.com/item?id=34096210
Effects from the storm linger. Buffalo’s airport shut down due to weather issues and remains closed through at least Wednesday.
Do you happen to have a source for that?
It hasn't been long since Musk outed that they'd consider mining so i'm sceptical.
Similar to other comments here, I've tried Magic and was disappointed with the quality of work. Recently my business has been using https://hellopareto.com/ (no affiliation, just a satisfied customer).
I think for that to be meaningful, there would need to be some mechanism to prevent fly-by-night operations formed to isolate the liability.

Maybe requiring them to post a large bond (proportional to the liability) and/or have insurance?
Honestly, that's a really good question. I didn't mask up for the last 5 months. However, after seeing COVID incident rates and such for my region, I decided to it again.

So I guess low COVID transmission rates, i.e. the R0 number.
tl;dr: distributed systems are hard.
True, but we also have planes that can almost fly themselves (for the most part), drones that are remotely controlled, stealth jets, and rockets that can reach Mars.
It's mind boggling that such a high amount of people are willing to pay up whenever they get a call or email
Show HN: FHIR Auth – An Authorization Server for FHIR Resource Servers
Hello, merry Christmas and happy holidays.

I've been working on FHIR Auth for the past couple of months.

FHIR auth is an authorization server that follows the SMART of FHIR authorization standard published in FHIR documentation, and compatible with most FHIR resource servers.

FHIR Auth can grand resource level create, read, update, delete and search privileges.

The project is still work in progress and much improvements are needed, but it now possible to perform the authorization requirements expected of a FHIR authorization server.

For maintainability the frontend and server is developed in two separate repositories.

I'd love to get contribution from the community. Happy 2023 everyone.

FHIR Auth server - https://github.com/zemantic/fhir-auth

FHIR Auth frontend - https://github.com/zemantic/fhir-auth-frontend
I don't know this fo ra fact. Actually I'd never even heard this before. I'd surmise the act of pulling a stinger out of another insect may be less than the amount required to pull the stinger form the bee's body, thus preserving the bee.
I'm sure those scammers will redeem themselves one day.
Not yet. SQL can be seen as a higher-level interface for Analytics, this one is just for the underlying CRUD operations.

It currently supports RocksDB and LevelDB, an in-memory variant, and one proprietary Key-Value store. Those are combined with higher-level logic, like Documents collections. Such combination would produce a competitor to MongoDB. Graph collections will produce a replacement to Neo4J, and so on
The field of science (math) that studies this (and applies it) is called "Operations Research"[0] and it's about optimization & planning. About 30yrs ago they started applying it to airline scheduling, here's a few random papers I found:

https://www.researchgate.net/publication/245236750_Airline_S...

https://www.sciencedirect.com/science/article/abs/pii/030504...

[0] https://en.wikipedia.org/wiki/Operations_research
this looks really useful! For my business I want 1) high-res data about local CPU-memory-IO (e.g. - how can I speed up tests), and 2) summary sampling data from production, to detect weird bugs or attacks. eBPF might be able to solve both cases!
I have all three of these experiences/abilities as well. And similarly, I think that as I get older my wake up timing is not functioning so well as it did. Possibly because my life changed so that I didn't really need it for many years. But now when I try, I tend to wake up two or three times, the first well before my intended target. And the later sleep is notably shallower and less restful.
Tesla stocks have been overrated; everybody said so. The bubble doesn't pop as long as people believe it keeps growing. Most have stopped believing.
Inflation linked bonds.
Their pricing page is my ultimate pet peeve - a pricing page that shows no pricing.
There's a strict law in other places that a provider can never bring up the option, it must always be a patient initiated discussion.
One of the more embarrassing things about the popular tech podcaster ATP/relayfm people is, aside from their wives, Brianna Wu and Anita Sarkeesian seem to be the only women they're friends with.

Back a few years ago when "there aren't any women in the tech industry" was the crisis of the day, it seemed like they wanted to upgrade from knowing no women so they went out and met a few not very trustworthy people who had nominated themselves spokeswomen of all women, never noticed this, and stopped trying after that.
Where do you check DCF?

I had to build my own Excel spreadsheet for this.

But I would love to find a place where they've already done this for me!
Very impressive project. If compiling Python interests you, check out the pytorch compiler stack too!

https://pytorch.org/get-started/pytorch-2.0/
You can absolutely link to all of those things if you have a compiler toolchain to do it. Can you dynamically load Qt's C++ DLLs from an arbitrary scripting language and use them via foreign function interfaces though? I don't think so. I remember exploring even Boost Python source code and finding extern "C" deep in its bowels so I seriously doubt people are doing this.
I had a little trouble using Bitwarden a while ago (user error) and the (free tier) customer support was very responsive and helpful as well.
Like a lot of Zen things, this sounds like someone 'trying to sound deep'. But I'll try my best to interpret it charitably and maybe others can chime in with their interpretations.

It's safe to say most people see mountains as mountains etc. When you start practicing Zen, you glimpse into the inseparability of things: there is really no defined boundary between the 'atoms of the mountain' and the 'atoms of the water'. (Also the atoms themselves are mostly empty space with a probability distribution of where the 'stuff' 'is'). Things like 'mountains' are really illusory abstractions that humans build on top of the underlying reality of the swirling wave patterns of the universe. 'Existence precedes essence', as the existentialists say.

Still in this second phase, you notice things like when you have a conversation with another, the conversation is not really being generated by either brain, it is being generated by the system that includes both brains (and nerves, muscles, vocal cords, the air between them, eardrums, etc.)

However, after enlightenment, you realize that the underlying physics is no more 'real' than the abstractions, as the abstractions are what really has an effect on the universe. As Zizek might say, the distortion itself is the real. When I see a mountain, the way that my brain interprets it as a mountain, in effect makes it a mountain, because the symbol itself manifests itself in my thoughts and actions.
https://old.reddit.com/r/flying/comments/zw5lsl/southwest_pi...

i believe this story. the scheduling system is too fragile and can’t automatically pick up disruptions to crew movement. they’re still manually scheduling some crews, but I think their main problem is they don’t have a way of knowing which crews are where and therefore can’t schedule flights. and it’s not every single piece that’s going to take 30 days, but it seems pretty likely that some bags will be lost that long.
There's no slack at an airline, it's basically a real time system. Imagine a bottling plant, if one part of the line malfunctions the rest of the line just keeps throwing bottles at the malfunctioning unit until the stop button is hit. There's no way to build in artificial delay to those kinds of systems.

Even if you could do that at an airline the margins are so razor thin. I bet there's a dollar value assigned to every second a plane is not in the air.
> that the public is both super-paranoid about being spied on and will
sell their PII to anyone who asks in exchange for a $5 discount

You raise an interesting point about this apparent disconnect.

> Because behavioural psychology tests reveal

What do you know abot these "psychology tests"? Isn't the reality that
both things you assert are really inferences based on anecdotal tales
on forums like this one?

Do you know of any large-scale cross cultural, long term studies that
show who will part with sensitive private data for small compensation?
How are these studies controlled for situation, perceived reward, time
pressure, trust levels?

What do we really know about widespread beliefs regarding the misuse
of data? What are people's threat models? How do they assess harm?

I'm not disputing the truth of what you say - both ring true.

I think we instinctively know all rational people are strongly
anti-surveillance. For complex social reasons we humans dislike creeps
and snoops and treat them as social outcasts. But we also know that
many people will sell their grandmother for a slight convenience or
advantage. Do these two facets really clash, and if so why?

> It's hard to craft good law when the mismatch between public stated
desire and public behaviour is so wide.

Is is though?

Aren't both positions reconcilable if people make no causal link
between the two? What if people just don't have the capacity to make
that connection? Could good laws still protect them in the way that
laws about asbestos protect people from harms related to chemistry and
disease they cannot possibly understand?
Hi, I tried to do my best to get all the hourly weather data into a single chart vizualization - have a look at https://weathergraph.app

It uses (apart from soon to close Dark Sky API) yr.no, indie-made open-meteo, and Foreca (which consistently ranks among top 3 services at https://www.forecastadvisor.com and is similarly good in Europe).

The app cares about privacy, has no ads and no tracking (as this is how I like all apps to behave). A subscription or a single lifetime payment pays for weather data and all themes and weather metrics, but there is a free version with yr.no data.

I'll be happy to answer any questions - Tomas from Weathergraph.
She's aware that Musk walked back the "Epic thread!" comment 4.5 hours later, after he realized how badly he fucked up (and probably got a talking to by investors). The point it not what Wu thinks, but how the marketing is reacting to the initial tweet.